{"report_id":"5f7330df-0ffd-4dac-b70e-792a24ce2775","version":0,"status":"done","tags":[],"date":"2026-09-14T18:47:34Z","url":{"schema":"http","addr":"kerostationery.com/","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kerostationery.com/","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"title":"WOBI Italia - World Business Forum","dom":{"size":1274518,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (421)","md5":"c4d1a2bba040af2b12d8dd1726555ad1","sha1":"0db36052a44bda24e728c448ae90e7c8fffa6646","sha256":"8e4711b9ce4a9a5975696d507123b1681dd945b2f0d6c66c1155b7171c40c3a8","sha512":"9c0c89df387bc099ad2be00b0deec54bd21aead7d0b91d0481770801173875187a33f088fd60ef6418e697e83743f32abd56ad811a971044ae6fbd80dbd88668","ssdeep":"12288:OmvJKeefAMi1+kdxSgQcfmZwDfcpW5WSlgD2ZlSTQJLt7kcf+bN:dBQcfmZwDfcpW5WSlgD2ZlSTQJLt7k0k","tlshash":"6e45854f47f235353423d1c079aa9b729bb8c543ea89ed003a9c87e58f9ac9154b727c","dom_hash":"domhashcf2f92d2fa8c2516b65066ebb863b9b6","first_seen":"2026-09-14T18:47:41.318318Z","last_seen":"2026-09-14T18:47:41.318318Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kerostationery.com/","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T18:47:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"9y49n2-m.ns1pcdn.net","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2020-06-30","domain_rank":419464,"first_seen":"2020-07-17T20:27:03Z","last_seen":"2026-09-13T08:45:17.801218Z","alert_count":0,"request_count":1,"received_data":130663,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}]},{"fqdn":"kerostationery.com","ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-22","domain_rank":0,"first_seen":"2026-09-14T18:45:01.699562Z","last_seen":"2026-09-14T18:45:01.699562Z","alert_count":580,"request_count":145,"received_data":7574017,"sent_data":79596,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Yoast SEO:25.3.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Divi:4.23.1","description":"Divi is a WordPress Theme and standalone WordPress plugin from Elegant themes that allows users to build websites using the visual drag-and-drop Divi page builder.","website":"https://www.elegantthemes.com/gallery/divi","common_platform_enumeration":"","icon":"Divi.svg","categories":["Page builders","WordPress themes","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"1a4s4dv-m.ns1pcdn.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-06-30","domain_rank":419136,"first_seen":"2020-07-20T15:02:54Z","last_seen":"2026-09-09T19:13:58.081217Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1041,"comment":"","tags":null,"fingerprints":null},{"fqdn":"performance.radar.cloudflare.com","ip":{"addr":"104.18.30.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":418040,"first_seen":"2022-06-29T10:44:51Z","last_seen":"2026-09-08T01:12:18.762724Z","alert_count":0,"request_count":3,"received_data":859,"sent_data":1311,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ns1p-aws-backed.global.ssl.fastly.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2011-04-18","domain_rank":422107,"first_seen":"2025-10-09T01:02:15.544701Z","last_seen":"2026-09-09T00:44:03.157976Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":537,"comment":"","tags":null,"fingerprints":null},{"fqdn":"valid.rpki.cloudflare.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1618272,"first_seen":"2020-04-18T13:41:52Z","last_seen":"2026-09-12T05:56:39.010106Z","alert_count":0,"request_count":2,"received_data":618,"sent_data":893,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_3.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09e1c8fb5c511f4437f47a807f2ef002","sha1":"498b6db2eb75065fbc73adad99048de4728a0261","sha256":"2dcd33276486c87aba67e334099dceb314457f8e2f8a808c41d0e26633b63a3a","sha512":"21aebb62569acbc9d6d2bd0a210911b3f9c7cca914c0a634fb613678ab60b08cf8204e1b9b2a26ad634659daec7a72becee955c08509496db6655ee929e2451b","ssdeep":"","tlshash":"7ec0124d70616567409e7c7d488f048abf3ecc12724945c69cdcd8547fb1e6942a584c","size":193,"data":"","first_seen":"2024-08-19T14:48:28.911256Z","last_seen":"2026-09-19T22:22:16.945897Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_3.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-09-19T22:22:16.946597Z","times_seen":3290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_5.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09e1c8fb5c511f4437f47a807f2ef002","sha1":"498b6db2eb75065fbc73adad99048de4728a0261","sha256":"2dcd33276486c87aba67e334099dceb314457f8e2f8a808c41d0e26633b63a3a","sha512":"21aebb62569acbc9d6d2bd0a210911b3f9c7cca914c0a634fb613678ab60b08cf8204e1b9b2a26ad634659daec7a72becee955c08509496db6655ee929e2451b","ssdeep":"","tlshash":"7ec0124d70616567409e7c7d488f048abf3ecc12724945c69cdcd8547fb1e6942a584c","size":193,"data":"","first_seen":"2024-08-19T14:48:28.911256Z","last_seen":"2026-09-19T22:22:16.945897Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_5.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-09-19T22:22:16.946597Z","times_seen":3290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_12.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09e1c8fb5c511f4437f47a807f2ef002","sha1":"498b6db2eb75065fbc73adad99048de4728a0261","sha256":"2dcd33276486c87aba67e334099dceb314457f8e2f8a808c41d0e26633b63a3a","sha512":"21aebb62569acbc9d6d2bd0a210911b3f9c7cca914c0a634fb613678ab60b08cf8204e1b9b2a26ad634659daec7a72becee955c08509496db6655ee929e2451b","ssdeep":"","tlshash":"7ec0124d70616567409e7c7d488f048abf3ecc12724945c69cdcd8547fb1e6942a584c","size":193,"data":"","first_seen":"2024-08-19T14:48:28.911256Z","last_seen":"2026-09-19T22:22:16.945897Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_12.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-09-19T22:22:16.946597Z","times_seen":3290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_6.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09e1c8fb5c511f4437f47a807f2ef002","sha1":"498b6db2eb75065fbc73adad99048de4728a0261","sha256":"2dcd33276486c87aba67e334099dceb314457f8e2f8a808c41d0e26633b63a3a","sha512":"21aebb62569acbc9d6d2bd0a210911b3f9c7cca914c0a634fb613678ab60b08cf8204e1b9b2a26ad634659daec7a72becee955c08509496db6655ee929e2451b","ssdeep":"","tlshash":"7ec0124d70616567409e7c7d488f048abf3ecc12724945c69cdcd8547fb1e6942a584c","size":193,"data":"","first_seen":"2024-08-19T14:48:28.911256Z","last_seen":"2026-09-19T22:22:16.945897Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_6.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-09-19T22:22:16.946597Z","times_seen":3290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_9.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"38a57cc4513164dd283abe1beb9f2510","sha1":"3087040525fff7e4e8a6b25f4b0bc250ba7d36ec","sha256":"5d6403796282864c52dc1e3f8a42ede4c8fd308aa610c64f8bb89ead35fbde1f","sha512":"0077f2209838535c76e523c135c3759c4cdfe7e82246166bb0b1e45b853e57343d6600e36f5a0afadc3a3646a74b6b4fe321830f391001f941af40f16cbe7523","ssdeep":"","tlshash":"ee11eda7f988193a12cff6bb513bd3a435b920a23c2004f3581688a5096dec6d976785","size":963,"data":"","first_seen":"2026-06-08T23:58:37.791706Z","last_seen":"2026-09-20T14:03:19.135336Z","times_seen":610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_9.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56df91490fa1984fa82b297dcb23c22d","sha1":"2050f127b73f50d21eb9b0a2a3f2aea7d4372ba9","sha256":"275407540ae2d5516300e4027ce994e1c97f958d464e137d0fff116d7acf0f24","sha512":"537ac565ea049803015a3b15881913d8179eafc11f95ac99dfe0ee842ac3d496ea3c6e1c167274357b7443e32ea9efab72400b95798479c5a5c81c9aabc88e8b","ssdeep":"","tlshash":"bbe0dfbbbb192e3906efa67771aee74a3676c091acc05560092ccc940b3fec4d03a1d4","size":375,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-09-20T23:48:28.762269Z","times_seen":621154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_9.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9a5db868483eb08f4fd928661d0c8cf","sha1":"ac5b60fbc4c5ae7ea39cae9c78aa9da213a55378","sha256":"813813dad35acb4facd8be5f3c127180d341365a81850f7de9639ec22e9b242f","sha512":"9cf1b4f27466a8accee904ef110181801e96d608dbae4c2091f68de559aca634e48924f58da0d6bb7bbf584dc9bf8e6cf25b876a67a6ae8108c78c3ac737c42c","ssdeep":"","tlshash":"038000a3802083000ab2030223aaaa803328a0002032080823c280223c82cab830a280","size":28,"data":"","first_seen":"2025-10-17T21:34:55.551595Z","last_seen":"2026-09-20T23:48:48.799597Z","times_seen":165326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_4.html#type=core\u0026event=load","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09e1c8fb5c511f4437f47a807f2ef002","sha1":"498b6db2eb75065fbc73adad99048de4728a0261","sha256":"2dcd33276486c87aba67e334099dceb314457f8e2f8a808c41d0e26633b63a3a","sha512":"21aebb62569acbc9d6d2bd0a210911b3f9c7cca914c0a634fb613678ab60b08cf8204e1b9b2a26ad634659daec7a72becee955c08509496db6655ee929e2451b","ssdeep":"","tlshash":"7ec0124d70616567409e7c7d488f048abf3ecc12724945c69cdcd8547fb1e6942a584c","size":193,"data":"","first_seen":"2024-08-19T14:48:28.911256Z","last_seen":"2026-09-19T22:22:16.945897Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_4.html#type=core\u0026event=load","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-09-19T22:22:16.946597Z","times_seen":3290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_8.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09e1c8fb5c511f4437f47a807f2ef002","sha1":"498b6db2eb75065fbc73adad99048de4728a0261","sha256":"2dcd33276486c87aba67e334099dceb314457f8e2f8a808c41d0e26633b63a3a","sha512":"21aebb62569acbc9d6d2bd0a210911b3f9c7cca914c0a634fb613678ab60b08cf8204e1b9b2a26ad634659daec7a72becee955c08509496db6655ee929e2451b","ssdeep":"","tlshash":"7ec0124d70616567409e7c7d488f048abf3ecc12724945c69cdcd8547fb1e6942a584c","size":193,"data":"","first_seen":"2024-08-19T14:48:28.911256Z","last_seen":"2026-09-19T22:22:16.945897Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_8.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-09-19T22:22:16.946597Z","times_seen":3290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_10.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"38a57cc4513164dd283abe1beb9f2510","sha1":"3087040525fff7e4e8a6b25f4b0bc250ba7d36ec","sha256":"5d6403796282864c52dc1e3f8a42ede4c8fd308aa610c64f8bb89ead35fbde1f","sha512":"0077f2209838535c76e523c135c3759c4cdfe7e82246166bb0b1e45b853e57343d6600e36f5a0afadc3a3646a74b6b4fe321830f391001f941af40f16cbe7523","ssdeep":"","tlshash":"ee11eda7f988193a12cff6bb513bd3a435b920a23c2004f3581688a5096dec6d976785","size":963,"data":"","first_seen":"2026-06-08T23:58:37.791706Z","last_seen":"2026-09-20T14:03:19.135336Z","times_seen":610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_10.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56df91490fa1984fa82b297dcb23c22d","sha1":"2050f127b73f50d21eb9b0a2a3f2aea7d4372ba9","sha256":"275407540ae2d5516300e4027ce994e1c97f958d464e137d0fff116d7acf0f24","sha512":"537ac565ea049803015a3b15881913d8179eafc11f95ac99dfe0ee842ac3d496ea3c6e1c167274357b7443e32ea9efab72400b95798479c5a5c81c9aabc88e8b","ssdeep":"","tlshash":"bbe0dfbbbb192e3906efa67771aee74a3676c091acc05560092ccc940b3fec4d03a1d4","size":375,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-09-20T23:48:28.762269Z","times_seen":621154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_10.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9a5db868483eb08f4fd928661d0c8cf","sha1":"ac5b60fbc4c5ae7ea39cae9c78aa9da213a55378","sha256":"813813dad35acb4facd8be5f3c127180d341365a81850f7de9639ec22e9b242f","sha512":"9cf1b4f27466a8accee904ef110181801e96d608dbae4c2091f68de559aca634e48924f58da0d6bb7bbf584dc9bf8e6cf25b876a67a6ae8108c78c3ac737c42c","ssdeep":"","tlshash":"038000a3802083000ab2030223aaaa803328a0002032080823c280223c82cab830a280","size":28,"data":"","first_seen":"2025-10-17T21:34:55.551595Z","last_seen":"2026-09-20T23:48:48.799597Z","times_seen":165326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-20T23:44:52.281208Z","times_seen":436908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_11.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09e1c8fb5c511f4437f47a807f2ef002","sha1":"498b6db2eb75065fbc73adad99048de4728a0261","sha256":"2dcd33276486c87aba67e334099dceb314457f8e2f8a808c41d0e26633b63a3a","sha512":"21aebb62569acbc9d6d2bd0a210911b3f9c7cca914c0a634fb613678ab60b08cf8204e1b9b2a26ad634659daec7a72becee955c08509496db6655ee929e2451b","ssdeep":"","tlshash":"7ec0124d70616567409e7c7d488f048abf3ecc12724945c69cdcd8547fb1e6942a584c","size":193,"data":"","first_seen":"2024-08-19T14:48:28.911256Z","last_seen":"2026-09-19T22:22:16.945897Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_11.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-09-19T22:22:16.946597Z","times_seen":3290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_13.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09e1c8fb5c511f4437f47a807f2ef002","sha1":"498b6db2eb75065fbc73adad99048de4728a0261","sha256":"2dcd33276486c87aba67e334099dceb314457f8e2f8a808c41d0e26633b63a3a","sha512":"21aebb62569acbc9d6d2bd0a210911b3f9c7cca914c0a634fb613678ab60b08cf8204e1b9b2a26ad634659daec7a72becee955c08509496db6655ee929e2451b","ssdeep":"","tlshash":"7ec0124d70616567409e7c7d488f048abf3ecc12724945c69cdcd8547fb1e6942a584c","size":193,"data":"","first_seen":"2024-08-19T14:48:28.911256Z","last_seen":"2026-09-19T22:22:16.945897Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_13.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-09-19T22:22:16.946597Z","times_seen":3290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_7.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"38a57cc4513164dd283abe1beb9f2510","sha1":"3087040525fff7e4e8a6b25f4b0bc250ba7d36ec","sha256":"5d6403796282864c52dc1e3f8a42ede4c8fd308aa610c64f8bb89ead35fbde1f","sha512":"0077f2209838535c76e523c135c3759c4cdfe7e82246166bb0b1e45b853e57343d6600e36f5a0afadc3a3646a74b6b4fe321830f391001f941af40f16cbe7523","ssdeep":"","tlshash":"ee11eda7f988193a12cff6bb513bd3a435b920a23c2004f3581688a5096dec6d976785","size":963,"data":"","first_seen":"2026-06-08T23:58:37.791706Z","last_seen":"2026-09-20T14:03:19.135336Z","times_seen":610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_7.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56df91490fa1984fa82b297dcb23c22d","sha1":"2050f127b73f50d21eb9b0a2a3f2aea7d4372ba9","sha256":"275407540ae2d5516300e4027ce994e1c97f958d464e137d0fff116d7acf0f24","sha512":"537ac565ea049803015a3b15881913d8179eafc11f95ac99dfe0ee842ac3d496ea3c6e1c167274357b7443e32ea9efab72400b95798479c5a5c81c9aabc88e8b","ssdeep":"","tlshash":"bbe0dfbbbb192e3906efa67771aee74a3676c091acc05560092ccc940b3fec4d03a1d4","size":375,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-09-20T23:48:28.762269Z","times_seen":621154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_7.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9a5db868483eb08f4fd928661d0c8cf","sha1":"ac5b60fbc4c5ae7ea39cae9c78aa9da213a55378","sha256":"813813dad35acb4facd8be5f3c127180d341365a81850f7de9639ec22e9b242f","sha512":"9cf1b4f27466a8accee904ef110181801e96d608dbae4c2091f68de559aca634e48924f58da0d6bb7bbf584dc9bf8e6cf25b876a67a6ae8108c78c3ac737c42c","ssdeep":"","tlshash":"038000a3802083000ab2030223aaaa803328a0002032080823c280223c82cab830a280","size":28,"data":"","first_seen":"2025-10-17T21:34:55.551595Z","last_seen":"2026-09-20T23:48:48.799597Z","times_seen":165326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"performance.radar.cloudflare.com/beacon.js","fqdn":"performance.radar.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.30.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"040319f600bebb1b7947f9e366abd65d","sha1":"33ef3d4377b48b57708b2de283444dde6de52075","sha256":"dbc7a7e00386b24c08341f333e911db5e564f3e993005b0586903cbff77dc4c5","sha512":"af882f8e246ea417ac37ba1a1b4911abfb552d2e4e70ada0e2e78beb361601682f0d3ee8ffd383d5bc241910c7a2e18b10c7179d71ccd1199a8000bde3a3c320","ssdeep":"192:qWwahR2RgBVaoRTs10/INTAPAWEZb7+BrEcbFcbKMcuZcbgcb+pcbTcbzc/WLeTq:qrahR2RgBVa0Ts6ADZWBrjWlCn+yk86h","tlshash":"1e02197317440b43cac54189509af3df361ab10a16c2d1afba3dcc1a3b19ed7b2a9356","size":8355,"data":"","first_seen":"2026-09-14T18:47:41.474583Z","last_seen":"2026-09-14T18:47:41.474583Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_1.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09e1c8fb5c511f4437f47a807f2ef002","sha1":"498b6db2eb75065fbc73adad99048de4728a0261","sha256":"2dcd33276486c87aba67e334099dceb314457f8e2f8a808c41d0e26633b63a3a","sha512":"21aebb62569acbc9d6d2bd0a210911b3f9c7cca914c0a634fb613678ab60b08cf8204e1b9b2a26ad634659daec7a72becee955c08509496db6655ee929e2451b","ssdeep":"","tlshash":"7ec0124d70616567409e7c7d488f048abf3ecc12724945c69cdcd8547fb1e6942a584c","size":193,"data":"","first_seen":"2024-08-19T14:48:28.911256Z","last_seen":"2026-09-19T22:22:16.945897Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_1.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-09-19T22:22:16.946597Z","times_seen":3290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_2.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09e1c8fb5c511f4437f47a807f2ef002","sha1":"498b6db2eb75065fbc73adad99048de4728a0261","sha256":"2dcd33276486c87aba67e334099dceb314457f8e2f8a808c41d0e26633b63a3a","sha512":"21aebb62569acbc9d6d2bd0a210911b3f9c7cca914c0a634fb613678ab60b08cf8204e1b9b2a26ad634659daec7a72becee955c08509496db6655ee929e2451b","ssdeep":"","tlshash":"7ec0124d70616567409e7c7d488f048abf3ecc12724945c69cdcd8547fb1e6942a584c","size":193,"data":"","first_seen":"2024-08-19T14:48:28.911256Z","last_seen":"2026-09-19T22:22:16.945897Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_2.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-09-19T22:22:16.946597Z","times_seen":3290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"performance.radar.cloudflare.com/beacon.js","fqdn":"performance.radar.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.30.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a052b954094dba5bdc5451ae74169f4","sha1":"222aa05b5f31b713ffd22867e8508ab008fd412f","sha256":"c0a26c32b87bd50d0d4664911ae8104ef92e5390ed10baa54f1953ed64149bbe","sha512":"06d01e60646bee3ea2fc08319d5d03beb3964aaca24c296291936bc3095127c97318cd56b2a98aa052ec38a2ab148b64f9aec76fcd3bed6a2a4c4e2cadaf68de","ssdeep":"192:qWwahR2RgBVaoRTs10/INTAPAWEZb7+BFNWZcbTcb+pcbzcbgc/HqeTFNnWvd:qrahR2RgBVa0Ts6ADZWBFNWCk+yE7Kma","tlshash":"43f1197327540743cbc60085509af39f361ab10a1ac1d16fba2ecc2b3b18ed7b2a6356","size":8138,"data":"","first_seen":"2026-09-14T18:47:41.47574Z","last_seen":"2026-09-14T18:47:41.47574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logo_wobi_400x400-min-1-2-1-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.785Z","timestamp":1789411617785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logo_wobi_400x400-min-1-2-1-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VNzcgbX9pQb9mK%2FzL55O2f5AbGdBjtOx5c5PqGsUdQUMJTi0L3vCEoKlg84THDMkZLbR%2BJEXxo%2BlZ7hRnzWpYpURuyV7D4xvCJ6nAPBKdNExg5J3U7dZViDQ%2FghZ5NLRD%2Fr7AIo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb35866fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7953,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e0d0ebdb8449b8f16de339ccfb91769f","sha1":"56016601b0046156334ab323d643fe3ba462834c","sha256":"53dd75875cc67026e6a6a34b8f035e09b37832ad214ebaf84690a155037a5a84","sha512":"ac732346e01e314c0cb0bfbf02227e9b2951a6c02a5abe017002bcdf60b68097bfb68157ddbb221e275ffa1af44e3c75ccad46450b3c1447361a9916fe22745b","ssdeep":"192:Vj9jhjOtK/OaaUl8PzczZ081B89A7vlCeNA:1//FjtAA7vlCeG","tlshash":"1fe1b866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df84ee07284","first_seen":"2026-09-14T18:47:41.320666Z","last_seen":"2026-09-14T18:47:41.320666Z","times_seen":1,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/speakers_membership_482x417_gary_hamel-28-min-1.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.811Z","timestamp":1789411617811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/speakers_membership_482x417_gary_hamel-28-min-1.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=32In85E3YD1LfmiWnFCqHtGA2UQIwT6l8i%2Bkf3xmM56UX9gY6Uwu99gJRwN%2Fx%2BhH32aRZx8Wbq3qzmMLdmHxr3xvSSeZDhjcPXd%2F0bCCD6V3SnHxI2XBE1lcmuvHPdeZOkTPAJU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb37887fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7951,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"dd6a53a0946c6d918c41669a6adc1117","sha1":"63ccb3d5396557c851e1b53316d8b0c0edd613f1","sha256":"93ac7756dc58f4d25149033de863e3fe725b9a55859368ed9aa1180e951db35e","sha512":"d341447687faee8a4c719779f3e79bc7395f725be326b82925e097739a9939024823966c8e070df123a94676f594b594694795663de015a1f8d0292d8a391bb1","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz9zZ081B89F7vlCeNA:1//FUtAF7vlCeG","tlshash":"65e1a966f9f925be1097827231ba7b193de48013eea704a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.321713Z","last_seen":"2026-09-14T18:47:41.321713Z","times_seen":1,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w3aXw.woff","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.892Z","timestamp":1789411617892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w3aXw.woff HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DnH3Tej1WmIAjw7GPnuGUtO5zs9r%2Fu0trZWH9r8g%2BLrBseD1pTksEXFaYxMs9WczKK%2BqlmK5faCjnwTRKbayq9wPQueHxjy%2ByYatL7GhvVZl8TreutKtNf9RbzV5Ect4ySeJGEU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb3f8b7fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7954,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"24a43477850028b351d21fd6b00ef26e","sha1":"dad13d97e0757a379a930cc99bf6afb861dff3d4","sha256":"24ba93fae39a52f2d1040ad4578c1ac8330326884a2d1c4b0d8b81e0912f1266","sha512":"2fdff64fbfd5682cedc31110c70602a4f7213e6965a1da3dbb07c0b26eb92bd2bde313802a671ece0acce63aaa5e00d6f6c80c03e12eae569f398b0b39fcc6ee","ssdeep":"192:Vj9jhjOtK/OaaUl8PzAzZ081B8987vlCeNA:1//FntA87vlCeG","tlshash":"91e1b966f9f915be1097827231ba7b193de48013dea708a576edc1720f8df80ee07144","first_seen":"2026-09-14T18:47:41.323267Z","last_seen":"2026-09-14T18:47:41.323267Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/wp-mediaelement.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.412Z","timestamp":1789411617412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/wp-mediaelement.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWY3g0SsU%2B1ytR9WUwlodLTUvL3VcI4Vt90o6U7wRG8LDpQ2xuYafWWkqorpL25vefyV3V%2BbjKJxOckGgo3yEqVXrcmdcD72Ag9PFqSQiRexwyoHgvlmeoxWURTwWbpILmYrFi8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a3b18eb0df81fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4554,"size_decoded":2585,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"0399021f1618114c071d310a2e77226f","sha1":"c7ee7986e510aa8aa022b3539789a7bbebd516ac","sha256":"6358668f4db9711410198884da302e2d377c8a615bda615463b1cb565ce8b01c","sha512":"ee507a019dde4b82318c9deb9c2cc3582235ed45132e7da1b23a2d1e86e9124b5a2068ead2d3ff86c9f620b3f1e27f7805316da876313c8175f56d304872c023","ssdeep":"96:1j9jwIjYj5jDK/D5DMFWC8cZqXKHvpIkdlv7RJlvaQxvbK:1j9jhjYj9K/VoWnhaHvFdlv7vlCejK","tlshash":"50916326bafd217e10a3816265fc63487ea0c553c6a705a076acc1391f9ff59fe1b1c4","first_seen":"2026-09-14T18:47:41.324346Z","last_seen":"2026-09-14T18:47:41.324346Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/password.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.419Z","timestamp":1789411617419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/password.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BdPKGGQbSkDmdtE0gzOMlHvN2u6fV2WTeFUI09D0%2FC%2FY19d2LKoFMuyCviCLk4gqWzm1fHKq3grCGLpe0%2Bff0QZL10mJPfpfGut6KRp55HZYvGmBFJ8ToFaW4YId4UrTAW7JvFI%3D\"}]}\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 24 Sep 2026 18:42:32 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68c93102-3a6\"\r\nage: 264\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b18eb0ef88fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":934,"size_decoded":1108,"mime_type":"text/css","magic":"ASCII text, with very long lines (933)","md5":"6831f399c821a3510009b92c0f50949c","sha1":"adba7a6509872164e48e2c04427348cafc25b907","sha256":"487459a974324ae992ec933f89cd54b61b517cc4b479717524db816d85ee2a01","sha512":"f4aa6f05a8949c84c8224e38349b57e7c0e5e3e3f9c8240b633c72200d2aa0b49a07f0d761a8abeacbf67d948b2bb96bfc6ac59022b4458d06cca639a29565bd","ssdeep":"","tlshash":"96115b71c9800ae9ed0fc2aa60d7d3d3131aea519c058ff15827f16d1a465cb307bb12","first_seen":"2023-04-16T05:06:24Z","last_seen":"2026-09-19T22:22:16.933381Z","times_seen":279,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/0","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.488Z","timestamp":1789411617488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/0 HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=5,i\r\netag: \"68c93102-0\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mIA9YpxpwMBDoYqNPBhu6cPeT1QAKx38ro4FqBLKfyFZlRfl5rHvHw5557uRr5VCdgxRgi3vtRV31LXrSczqnJS2BMblqiehO%2FM%2FwKjtLWFo6hiWDsWVayWWsekN8c2564sDUyg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb15fb1fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":705,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/adsct.gif","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.489Z","timestamp":1789411617489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/adsct.gif HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=5,i\r\netag: \"68c93102-2b\"\r\nexpires: Thu, 24 Sep 2026 18:43:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 220\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xMuPW4AIyWcfd%2BFipLvG%2FAGf49WEapATf0Xll%2FCx39egjkntij6mXanlr%2FSUTrYiuUq3UCPeGy0XEeklt0aejeiCBI1xbMyq%2ByhdjO6R%2BNJmvyQ0hbPan%2F5rJxYyWyMWghizqjs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb15fb2fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":821,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-09-19T22:22:16.760041Z","times_seen":1445,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/layout-screen-small.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.603Z","timestamp":1789411617603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/layout-screen-small.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IWoW5kdX5a9hUIO%2F%2Fp2zizDZGj4i6wFcCGAgS9Op0d1C9Vf5TJzHgZ0iyJ58So%2Bpnfpz6s5uEoKGAQntSSnr8tdZs4pe7F%2BTYBE%2FN4y%2BieYWnpHY4vAJXtJ8Pp893BIgeyvwi3M%3D\"}]}\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 24 Sep 2026 18:42:34 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68c93102-680\"\r\nage: 263\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b18eb20ff9fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1664,"size_decoded":1013,"mime_type":"text/css","magic":"ASCII text, with very long lines (1663)","md5":"9a207cd4ef1d3346a02fd96b0245ced7","sha1":"2e2ceea4dc86dc3b4f36614d51deb24e520bbb07","sha256":"b8e7c47e54a4596e40781b31a44c544afc739111df5fe98b1edf0a1027b2180d","sha512":"5d4e5f24ea38967a8074dc188764e1cd8200a38df65bfd6b74abaf935ac73353af01104ee78849cb27523617b143e294841e19eb4641c09dc1fbb808ca581a35","ssdeep":"","tlshash":"5a31db321a51afd0fd6f60c6e0cfa3ab0711ce16dd199e9aaf07cd076e608258827765","first_seen":"2024-12-15T13:27:06.350743Z","last_seen":"2026-09-21T00:26:47.591323Z","times_seen":1368,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/8319715-scaled.jpg","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.604Z","timestamp":1789411617604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/8319715-scaled.jpg HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=4,i\r\netag: \"68c93102-2ead5\"\r\nexpires: Wed, 23 Sep 2026 17:19:33 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 91643\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n2jdeR0SFdTxLoUSgbMmVg7doho2WnJgXf3THgis44pQrcsb8rRjtMXSp%2B8fBcZ04hWEwNznIWFdMWBaFHsSPgM1jdrVfbhbEz2lzh7QKUex2P0VJDzaHpIx8dNxusB%2Bqro4WkA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb21ffcfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 191189\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191189,"size_decoded":191967,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 2560x1707, components 3","md5":"2b4be86de6ed9d4bf73c3494fa21f4dc","sha1":"e2a6c589015a136eb57af87a31590b04472805a0","sha256":"43801cf2cb39f89b788b69c4c5ca11d963fb2110629cd2ccab5c9876ade50eed","sha512":"3f1a1b3038854c9a3f1b0766305c2c2f311f355c6faa2fd84608ad249b9fa7647637ddbef214997bb10e4ba215c702a8283b39dfeab09114414c179c77cf8fdf","ssdeep":"3072:CH4SWAKB2lH1ielQikLQpZCK7AyZWqh8SKzdGFGIongqNssh:/KHZ0QpZjAyZBKuGznrNssh","tlshash":"4214e0c7660673c6ca4b53b5878b2094fce674007eb751546ba3c47202fab15fab9be0","first_seen":"2025-10-29T06:03:01.360651Z","last_seen":"2026-09-19T22:22:16.880722Z","times_seen":5,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/wbf_sponsors_mil_640x400_newsection_brt-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.790Z","timestamp":1789411617790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/wbf_sponsors_mil_640x400_newsection_brt-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LhXoH4c%2FJf7QTs%2Bf3bp3ItsmTwsP5w3Q0N4G0ChzV7caNScQfX1fdmj9FQWJCypfrNJb2klyXdBqABGSdJ6YECrun79o5MpifpmTJc5AsrgXTZXjbNfeGQf9gAPw1eyvJy76Zqk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb35874fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7947,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"1168aaa04294c52369d060c6dc61126d","sha1":"cd5edf755036135ee8d78dc244ebaeab726961b4","sha256":"38e9f7a2b4ca4b0c9450fc311c4c27b3803c4f14428f0834a673b270edc2fbf5","sha512":"6c5a2379a3fad804204b4246583205a508f387d75897bd4392c4faaa68eb58edf0e2ca249911342bd3e3790248e8624c04a37d7d1058e27416ab4dc368bcbd1c","ssdeep":"192:Vj9jhjOtK/OaaUl8PzVzZ081B89R7vlCeNA:1//F4tAR7vlCeG","tlshash":"73e1a866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df85ee07284","first_seen":"2026-09-14T18:47:41.328928Z","last_seen":"2026-09-14T18:47:41.328928Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logo2025_newsection_kpmg_-1-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.796Z","timestamp":1789411617796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logo2025_newsection_kpmg_-1-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qdG42AIBcD3im0CDrt6Wxn1zE5dbnmLRnSbnpMdt1%2BMt9ycp6hdzA0GB2agG1GS7hw4YXwPyBuRr%2FmhqbBJVk6AdXj6kO1UMKRj0KUEglJ8P%2F6y3TomZzH8BvNtnNKEJTNgKIUU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb3586cfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7949,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"666b3125229b99d4169626e8158eae55","sha1":"14041745c78d725e060f99339936604df8fcbae2","sha256":"c58a812505089a61698d2c6e4a27232c0d61061688d40e36c29287244d038f05","sha512":"692d4d8fa343cb6c12096d20dbb35bdb2d16f8b4f20c8d724501cae519fee88b3488f4f517088fba7eedc4be8d4078d3a24745def2cb5af5190a3b076c80b8f4","ssdeep":"192:Vj9jhjOtK/OaaUl8PzdzZ081B89Sy7vlCeNA:1//FEtA17vlCeG","tlshash":"9ce1b966f9f915be1097827231ba7b193de48013de6704a576edc1720f8df84ee07144","first_seen":"2026-09-14T18:47:41.329849Z","last_seen":"2026-09-14T18:47:41.329849Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/frontend.min-1.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.418Z","timestamp":1789411617418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/frontend.min-1.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PL2jTVKtfoQxJEtZd51A%2FXo4PMxVlaWWOVCsJXYaP%2FC8whROlnpZv9KhzRYbHie9TMC2z%2FeaFTf%2B8CRwd%2FO1La0j41zXY%2BXCba56vauXdT%2BM94JkgaMmcpUQ4LAymEU56ikUWf8%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-1719\"\r\nexpires: Thu, 24 Sep 2026 18:42:32 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 264\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0ef86fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5913,"size_decoded":1718,"mime_type":"text/css","magic":"ASCII text, with very long lines (5912)","md5":"de8425b20d2573d953f90cb6eb9e54b3","sha1":"4c0e21cb52d35893a91f38003f086ac9df12d3a9","sha256":"9b681267de19996231ead57ddbd3a1ffdaa247eb1e378d06e2a9803947afbfbe","sha512":"ef15f74f02430c6739889c97804f6a52691bc3ca78dc50e27ef8aebc21cca4ba77ce0ed63068ff42a3be698af8c5c7bc59600e86b95e0714a25d54a5f8adab80","ssdeep":"48:LbJuu3I+jlfYTwHin7aCPIBl9t9EHfALSxOGz8rNDaUv:vzlwiy7tPIKH5hU3v","tlshash":"9bc17e3419127ee8daaf48d3a2cba7e3931adb3acc59df94df4349074e90251d1473a8","first_seen":"2023-04-16T05:06:24Z","last_seen":"2026-09-20T17:09:54.57962Z","times_seen":737,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w3aXo.woff2","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.669Z","timestamp":1789411617669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w3aXo.woff2 HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eBLuWyIIZaS%2BcSdtJ9rTufuag3tTMJ4%2BRV6peGzTJY5m6zh08LaYnBjSJsi7KWqElxCOKsA7WQ2svcJyKpeAp5LWO2fGURlJN1GaNJRQZ1MNMK8PO5FaZRsWQ6Kl6fcxO7QJhb0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb27821fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7950,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3bdee80d567b5a2cfe6b630971f6e523","sha1":"489c09f9cb97dc4a5d048f3cb359343556ad14c0","sha256":"826022282e8bfaf8c5b21ced525ca0fc504c865957da74f14d23909d7c7c4ae6","sha512":"11cdb01c84e92ccea532d5f0a1e3ebe14732f2ea378f865ecb04b0a3377f07a178face99d1aa8386ac41b948893bc6c41882dabc925c182269a6a7901cd3422f","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz4zZ081B89g7vlCeNA:1//FDtAg7vlCeG","tlshash":"2ee1a966f9f915be1097827231ba7b193de48013dea704a576edc1720f8df85ee07184","first_seen":"2026-09-14T18:47:41.331432Z","last_seen":"2026-09-14T18:47:41.331432Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logos_web_700_axa-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.792Z","timestamp":1789411617792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logos_web_700_axa-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VP9LP07wnyUw4KXmLR%2F2k4g7RMH4NWjerFamLco6H3KWTDjjHsNyxAxxmOFWo%2F0Vu2rHIjZRo6psg0gYni9SGiygoXqpzjFObwYosrd%2BOysL%2Bye2ryHnXckHlVGnOVLs%2FqEHgl8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb3586efea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7953,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"05889dc3dc24aa71fbe8241c518d5a28","sha1":"6833a5f285da97cdbf3365e983f41c79bf66d475","sha256":"f19c87170b3751f2194ba73ae369760c3872aa47133209ca7e51fc403216e6b6","sha512":"c59bf9d2f09c7a2a73091939ded4803c9a4cdf76a3f8960662b0566700ceb03b8b4ede5a9278013cb3b433b566e308d8292ccee951cd70a2a985c34711d54048","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz7zZ081B89r7vlCeNA:1//FOtAr7vlCeG","tlshash":"afe1b866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df84ee07284","first_seen":"2026-09-14T18:47:41.332824Z","last_seen":"2026-09-14T18:47:41.332824Z","times_seen":1,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/wbf_sponsors_mil_640x400_newsection_gft-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.801Z","timestamp":1789411617801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/wbf_sponsors_mil_640x400_newsection_gft-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mDVfsNZN2H2vfvzAecd4IV57Cwg53Ncw8T5S6Qr0PRfnI1gYad8skf%2By1g4bhq156eam1gErXTiosR397zHQ%2FQu1jQvQxt3AJyzk0A13lWF7JLq7e%2Fv4U0jxAZoq3cA0IaAX0Xo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb35873fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7949,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7a4a8bcc63bb89472073d829f7972e76","sha1":"256870ffa7443e4b58e46b6b80620c44b8754281","sha256":"9cbcee387a2971dde6eff5e3872553e3b523eabf44786efed22c37719baaf42d","sha512":"c7f0bf16db96410f15b557c911473f38fc9cce3a39f34111c95d894b4adf2b98a67ddfc76fed551cbf31991c84be5d4b9c76fcbcc9a272b218ba05f133dbfee6","ssdeep":"192:Vj9jhjOtK/OaaUl8PzWzZ081B89u7vlCeNA:1//F1tAu7vlCeG","tlshash":"bce1a866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df85ee07284","first_seen":"2026-09-14T18:47:41.333843Z","last_seen":"2026-09-14T18:47:41.333843Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/wbf_sponsors_mil_640x400_newsection_zeta-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.805Z","timestamp":1789411617805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/wbf_sponsors_mil_640x400_newsection_zeta-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2BVuR%2BvkbPSk%2B%2FTNsoscB301zKao51UVLXxgmtpnova45zjmXHuc5aYXbDtjZ6Bext8k5KkMvjkLmAYm4NuKyvY%2B80zLx2604CEH9QqfZKrrAjviOc6wOrcMpHcS%2BM9JrbxbWXc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb35870fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7955,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"38fd87f0d28312ac386b613d0f090655","sha1":"9dd92d5c3086cd9e8902a0e567a7a4eee9093a6c","sha256":"8241bd570fe768da4f8654816acf2cb7ce573cd1ad63e801435715331f3d3178","sha512":"ebd11e04e848ca51d1450e6a6eec7ca5bdedf8d4d1f3f4b3497470b0cd52c8c07d17300bfb7abd1461e9e3dbbcbf49ce82a00cfb26d56f792293a0ba48bd819a","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz5zZ081B89V7vlCeNA:1//FEtAV7vlCeG","tlshash":"63e1a866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df85ee07284","first_seen":"2026-09-14T18:47:41.334919Z","last_seen":"2026-09-14T18:47:41.334919Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logos_web_milan_640x400_axa_10.png","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.816Z","timestamp":1789411617816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logos_web_milan_640x400_axa_10.png HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qEP6JSQuHZcTLhDYQfnrW56YqS8OedRNc5XBHA1Vcq4gSMskdKz8qaO4KfjlCBkGOTYBDj67h6NcGr0OxMwFFN4jU6RA%2BTlFBNxiTr1XD7yuOtLzIp325mhq7VY4v1J3Vy6woLw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb37889fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7945,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7de640315b52570cfef25e723fb7acef","sha1":"8cf48f84a562474b48745c9d995337960c055af5","sha256":"22fb21a6397a4ed0861a1f83d1ef716ffe7b13072c9394ec3089face92844750","sha512":"3ae204fbb69acc555f80c6e4ab94d4ba855b941b65ae25505180d00e827a7734e5c428e7e9db4a3083fa65341a0a997962f6ac3f80bf5b9930c44b623effd578","ssdeep":"192:Vj9jhjOtK/OaaUl8PzDzZ081B89j7vlCeNA:1//F2tAj7vlCeG","tlshash":"e3e1a966f9f915be1097827231ba7b193de48013ee6704a576edc1720f8df85ee07184","first_seen":"2026-09-14T18:47:41.335888Z","last_seen":"2026-09-14T18:47:41.335888Z","times_seen":1,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_7.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_1.html","date":"2026-09-14T18:46:58.007Z","timestamp":1789411618007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/index_7.html HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Am8yg5tmQu%2BQ56lxQqBax06ols3jsbe6KWMhcZYx0itBTySA19%2BEzqQ8cErcV%2Bi4shWEBf%2Bll5sKjvR532XdNnIh%2BHXXZ99gfSVupA%2B7t5WaXLjen%2BjxwuVepi%2FY%2FwViX8vmM4Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a3b18eb4a8dcfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7963,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"38799da4d61c458d0e47f38451b2dd46","sha1":"c6b7f892cc66a89822db9ea70f42f073be16fee1","sha256":"53fa5cfb960a085f550cdd670bc54bbe7d248ceec92aa450ae2be23574533c8b","sha512":"16dcb28cb1790fd4a1afa920295982aaec73e5f339285b6e4a3b09ed9aaedb60f9b9a31edd9c8e2c7e9f9f9742edbf0fe6735cdd176810d3ebccb80c64b461b4","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz/AzC081B898d7vlCeNA:1//FYtAY7vlCeG","tlshash":"2ae1a966f9f925be1097827231ba7b193de48013de6708a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.336884Z","last_seen":"2026-09-14T18:47:41.336884Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/9c58d0e1-1013-4cfe-93b3-b31468b902ec.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_8.html","date":"2026-09-14T18:46:58.123Z","timestamp":1789411618123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/9c58d0e1-1013-4cfe-93b3-b31468b902ec.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_8.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fYcMazDdoED%2BaM0AK1SnlMSUaiaC8R5%2B8EXQHB%2FGbElnHYMp98BGk8d1Lulcp8uwFXN9Oyt2Ud5uOzkjebsWVCZoe7sGBDHspbwvrtnVSq0XGG1aFXdanvjyEcHzrvmn9sbm9oA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb5591afea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7951,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3df8ff2dc19b7936cde6448511dd79b6","sha1":"5002f48109396b8bf2c1c3cc87ab464a31c66aa4","sha256":"d953bd9c70fe3c365c756bae1557c3009f8c5f104af7c5db03bb79edd5873b96","sha512":"b705c58bd2f56189ed1512294768d8018f0f0cf528d0b7dc9fc63901d52bc9481c926d73e468991f6685ed87d7cfb1f256931d6d26b81b747703730502f2706a","ssdeep":"192:Vj9jhjOtK/OaaUl8PzBzC081B89h7vlCeNA:1//F7tAh7vlCeG","tlshash":"5ee19866f9f925be1097827231ba7b193de48013de6604a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.33777Z","last_seen":"2026-09-14T18:47:41.33777Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/dropzone.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.414Z","timestamp":1789411617414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/dropzone.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNpH2oZVohOOqtlDtx2iV2h3cRHbclu4oUZ8slN719rPJ2T49wtBq6mBubMRlujPnEMBt%2BmQZa%2By02Hfjbwlvfa%2FemFxwH3BpvNLYrnmc22lQYjdzcMp1mA5h6KQqu%2BZ4TlX4Gc%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-28a1\"\r\nexpires: Thu, 24 Sep 2026 18:42:32 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 265\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0ef84fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10401,"size_decoded":1983,"mime_type":"text/css","magic":"ASCII text, with very long lines (10400)","md5":"8645ce3e0a0ae4d65d95f5e0f93621d2","sha1":"eec1a713e01696898f1cab298b24ba1cdc6e5107","sha256":"ae13898fa75f29831347224a325640e22b6e81d818c7324b7ba7b4f111bbb6a7","sha512":"b34f89a055cff63db5ef528f58a7fbbadd76923f53ea3f5adbc3dd355ec9cc451a5dcdbb853901f0bf31fd663e1bb5edb7e3fbf8c1004fbf4e87bfc936b0ec6b","ssdeep":"96:Jkmi1UTfvTng7BTAsCyEu9gTn3lpy7PTI0G:DT7nuss6L1ps00G","tlshash":"5f2270796751de99f61f811c7cfaab4b5ba9d043aa1d2eafb52f90ccdec62204143340","first_seen":"2026-07-21T03:18:42.955144Z","last_seen":"2026-09-19T22:22:16.828474Z","times_seen":5,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/speakers_membership_482x417_brene_brown-01.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.808Z","timestamp":1789411617808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/speakers_membership_482x417_brene_brown-01.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xvnb19M7N7TdailHT5XDWSmOeb8ectOgIMKVk5P4znpHzQZlD3Sz0QQ1c7kdX9nm6OQhBVpcLy%2BYQbACba0KOeJQzB8XQjZFkEZ94%2F18YxagqzFhngUrFOsScQO%2FGxY8ZoIWewU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb3687afea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7949,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ab648e636ae8860d7db7f77359fbeeec","sha1":"1c1ba8fb4f5f86e17509a0503a65a14f345fd4d9","sha256":"1eab230efc686e37a2df26d0e1599f850d29937822a118d2327de4ad747f1234","sha512":"7087a0b53a0694ad965c09df01662d150685ba48a3494c8b1bb90dc51b31c266b4270af73019056019b982919339df0ec257c1acf83f69b22989f3161bfdcc7a","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz9zZ081B89J7vlCeNA:1//FgtAJ7vlCeG","tlshash":"5ae1a866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df85ee07284","first_seen":"2026-09-14T18:47:41.339531Z","last_seen":"2026-09-14T18:47:41.339531Z","times_seen":1,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/wbf_sponsors_mil_640x400_gft-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.814Z","timestamp":1789411617814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/wbf_sponsors_mil_640x400_gft-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YKHN9PCy1PlwampVsktLiGcRP%2BVhyUAkVTd5vLS4%2FV5MiR7atwvYaT5HYYEF3KGDZZomW5Ia%2BJwvAH2NiX9rWtBKX5yWcNQ7trotoedSly6h7jXNvcFmV%2BmXc6ADE9kvMBGSUa4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb37888fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7951,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8ddc3882d212e2810325fd7af5899031","sha1":"93a15d07ed418839838459900a8bada78fb0d0d5","sha256":"227d3398de016f363e4f36156aa2afb4aeb73c6f5d662282f60bf365bcad5f12","sha512":"5a8b2a6c493cba92a42a54b4a57bb67d2b0a1ea65e308dfe079da35d383bb8c8aa45abc60c8dacbf54aa123ccd86ba51e8cc7af2f2fb56fb9f283a364af0bc8d","ssdeep":"192:Vj9jhjOtK/OaaUl8PzGzZ081B89S7vlCeNA:1//FRtAS7vlCeG","tlshash":"98e1a966f9f915be1097827231ba7b193de48013ee6704a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.340875Z","last_seen":"2026-09-14T18:47:41.340875Z","times_seen":1,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/9c58d0e1-1013-4cfe-93b3-b31468b902ec.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_8.html","date":"2026-09-14T18:46:58.395Z","timestamp":1789411618395,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /lander/glowing-sand-silent-car/9c58d0e1-1013-4cfe-93b3-b31468b902ec.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_8.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ZKYVOqjuN3ZWpOH3mzUIMasLmQfraZA05U5hAhAg3rozGs5n5kPmxZjlTDmydj%2FK3plA8xS98MWKxscDfgapHsJFWQL3a63xI9hAFLuUYsI476%2F1F9yHG6Wq0R3bJhqF9MBgKY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb709a8fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/mediaelementplayer-legacy.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.410Z","timestamp":1789411617410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/mediaelementplayer-legacy.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h69dUvqhAOeO0khIjnLq0Wp8fgAXU7M8Olc8vsEh8Kc4GD20bjI7csjQT%2FVTcR6DJvPsIyDUfZrG5fFkdBECrcxcbuhxZcJ%2Bq9XUfa1dtIiq8%2FqbGvXfX3QwmKjPwNCuDP1siZg%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-2bfe\"\r\nexpires: Thu, 24 Sep 2026 18:42:32 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 265\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0df80fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11262,"size_decoded":3375,"mime_type":"text/css","magic":"ASCII text, with very long lines (11262), with no line terminators","md5":"bc7b5c900647794f8e268fbfa2567ef4","sha1":"fcce9919aeb956bb9b358f99b377b17d9d4ba509","sha256":"83893f10ed8c4ba25415f216f5aa47752bfbb738523687d8e0fa81eec395f12d","sha512":"d21ac53d03b14879aee681a84b3e21178c331f1b344f3175a9eec28a790a2d6f782758e2524489a20285d144dd58b73f7678e956cc9e31ee7fd354f81f9053b7","ssdeep":"192:xthsVmeDXDCnvgZenLARKdXSMpNO96hDIzL79V1QVSD1CNxn6fR31r:czDCnvuenLA8NBhDInSwh31r","tlshash":"823222929c88212cf43795645ac107ec923fc303fd62ededb73c7679caca58a516a943","first_seen":"2025-07-03T05:11:29.622717Z","last_seen":"2026-09-19T22:22:16.936559Z","times_seen":21,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/1.gif","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.492Z","timestamp":1789411617492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/1.gif HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=5,i\r\netag: \"68c93102-23\"\r\nexpires: Thu, 24 Sep 2026 18:43:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 220\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VeBksSotwDX6bAn3hywNG%2FQgr5hiGrRvdZfXT5KWZK8UUD9d4iZH94TaEl%2B6MMpgeCNM3iNTj0pdHJWMZQtDZ8mqbw2pvW%2BBBEWw%2FKlitn68E4vyC0oe6TtLMPCoFRlKfFzok50%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb15fb5fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35,"size_decoded":807,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"c2196de8ba412c60c22ab491af7b1409","sha1":"5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b","sha256":"6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992","sha512":"84e24a70b78e9de9c9d0dfeb49f3f4247dbc1c715d8844471ee40669270682e199d48f5fbec62bd984c9c0270534b407c4d2561dd6c05adec3c83c1534f32d5c","ssdeep":"","tlshash":"d4800003e280c002c2a2c0300e0ccb802b88b0208a28030fb0ec2baeec3a2a00c02000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-09-20T23:42:51.47655Z","times_seen":190765,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logos_web_700_lundbeck-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.804Z","timestamp":1789411617804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logos_web_700_lundbeck-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41q4z1T67l7i3jlnMYl77eOlXBw%2FM1IXPGBeR0gm63d8VMBzG%2FcqQWVj7L97%2B3wDEGWMxLxgyFYTGqm5lY3TR%2BbBoKoM6FpUCGSDVzx%2B1oB%2BQmySKJsUn921QQj08x6%2B6vWq6ws%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb3586dfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7957,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e1453813019a59790826217c4a50d0ed","sha1":"125c3220c7895aa6d8bfc7f3dca2d52555c4cf4a","sha256":"4d559bd8b8fd5ca0e7873f53731112b7c13dba1adecf0f5b4b3733838ba13756","sha512":"c0808973e86c0bafe9f5e9eae72d7458ca0a4145af553a9a3bc74a08dd400723c605aed8ce84a47134e23138b925841234cf0338a49051453ab64e4d1ed93743","ssdeep":"192:Vj9jhjOtK/OaaUl8PzezZ081B89a7vlCeNA:1//FJtAa7vlCeG","tlshash":"4be1a766f9f925be1097827231ba7b193de48013de6608a576edc1720f8df84ee07284","first_seen":"2026-09-14T18:47:41.34491Z","last_seen":"2026-09-14T18:47:41.34491Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/89d3f42e-b54b-4196-a61f-91d633b86608.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_3.html","date":"2026-09-14T18:46:58.015Z","timestamp":1789411618015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/89d3f42e-b54b-4196-a61f-91d633b86608.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_3.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kaHbYO0QLsZCOuDSQO%2Fm3MsZSeAXnvWOFlzMIJYLeuFk2bW%2BpVvM%2FypH%2BipcSPUCrUkxIcQcj6kmK8PZbGRgVt3gwrTMq9sTzFkGM4jOLO5oz8ItPBTwM0k8ysGRNW3WAeISvbs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb4b8e0fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7953,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"c3d6d77bf2a6192947e608346f52381f","sha1":"745c8785188e93cb74da40026e198743907c86b2","sha256":"0ab346629042749c5008a8a9d63cdc55e1402abcf97cffdeeb5195ebfb2b908f","sha512":"b9270645b71a6c6310f8240044f354825a59cc790c53cd14bdedb8dd8b559462b822b9aba8adf419f494ef035757c32caebd0376f3085091e95d632e52c52e78","ssdeep":"192:Vj9jhjOtK/OaaUl8PzZzC081B89p7vlCeNA:1//FDtAp7vlCeG","tlshash":"dee1b966f9f925be1097827231ba7b193de48013de6708a576edc1720f8df80ee07144","first_seen":"2026-09-14T18:47:41.345927Z","last_seen":"2026-09-14T18:47:41.345927Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1a4s4dv-m.ns1pcdn.net/a/t128.jpg?r=65256675","fqdn":"1a4s4dv-m.ns1pcdn.net","domain":"ns1pcdn.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_9.html","date":"2026-09-14T18:46:59.336Z","timestamp":1789411619336,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /a/t128.jpg?r=65256675 HTTP/1.1\r\nHost: 1a4s4dv-m.ns1pcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_8.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.578Z","timestamp":1789411617578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/index_8.html HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mTwm4G08XxpGjpLJS%2F0GKuR%2FjC6v2BgmTBX5bLEftIvJrVVAI40oewqJQ6cSvesAr30aLB4OEDGgtzVqA9UYgDuHHaAQfs27W4d6I3B%2Flq5%2Bn%2F%2BDmGosnrKjXSoroJ602w6JaFI%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3b18eb1efe0fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15675,"size_decoded":6146,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5967)","md5":"5957be8c0d8779736a622b6a875f428b","sha1":"41b0ad14406e4f56ef97b121c20439ce60bc6e4c","sha256":"073e1c92dfc326df482389384eb4af63c79be453d3b01659706593be6fe46431","sha512":"2ed52997c82b5d4eef0908fd2a8caed1c655f3ea63fac85599013754cf77bf21efc1f74cf4f20f983301b8c87d7a7a14ffd8f40253368c4af7445aa7b6d14a86","ssdeep":"384:tgDzA89oy/Lr1SeJb4V3qMkAozoCm3xC1:Eoy/LEew3q9vzoCgE1","tlshash":"0762f970581100329a5b6ce9afc67d656c5f9126b2868a307ffd910c7edad30d3aaf4c","first_seen":"2026-07-21T03:18:43.144266Z","last_seen":"2026-09-19T22:22:16.897181Z","times_seen":5,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logos_web_700_hertz-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.820Z","timestamp":1789411617820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logos_web_700_hertz-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eD5rMxgJLZB%2B3GxL6lvv6CXKXWOjt6dQ7SR11xxtYu686yCMm61aeMkOELs3z4sQBZDjSTm2ApACCldxDJ7alj6wGDtd206suq816SaFD%2B61rS6WBxgQHbIQ6EuZD0h2%2Fdui22U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb3888ffea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7949,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d77ef75649cde8f8d4610ae90d203eca","sha1":"5c3beae57c5ada861eb9370ce458f2b918a2c2c6","sha256":"7c4694862e47884c738fd041713a73bb3e2e773dd9d400affe9949c7a8898542","sha512":"0b3bd7ac15fe0d593fab89aa9849b89705632ca7bc538f81071d3071c985c4550ad9f079644a191a871d60e95138792a05075f58e512b1dd0d13acb159a50154","ssdeep":"192:Vj9jhjOtK/OaaUl8PzhzZ081B89B7vlCeNA:1//FotAB7vlCeG","tlshash":"0de1b866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df80ee07284","first_seen":"2026-09-14T18:47:41.347706Z","last_seen":"2026-09-14T18:47:41.347706Z","times_seen":1,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1a4s4dv-m.ns1pcdn.net/a/t128.jpg?r=2914174","fqdn":"1a4s4dv-m.ns1pcdn.net","domain":"ns1pcdn.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_10.html","date":"2026-09-14T18:46:58.820Z","timestamp":1789411618820,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /a/t128.jpg?r=2914174 HTTP/1.1\r\nHost: 1a4s4dv-m.ns1pcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/6dbd3384-e864-44c3-afc6-e883ec36a620.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_6.html","date":"2026-09-14T18:46:58.134Z","timestamp":1789411618134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/6dbd3384-e864-44c3-afc6-e883ec36a620.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_6.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BBAVnQECP8WhtUKLzNIeAb42gRH9TYnNM3h4EJdmtbVbzVJD1kdPIB8C0KekkCg1Uheex4AuGSP9Yk%2BgF%2FzRH568Vpjvkr4CyR5Q5NDccbwjjmvYY5lt%2F4FbLXw3BuTkgFJo4LI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb56929fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7951,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"b2fbca283bb742268338344ce17e8719","sha1":"769dea670c3aaf7f02059a91d3b89e3e7ba63255","sha256":"077d59e4e3c522fab2c7d1038b4fb5101803b84511ed60e0047c5a0d44e4cb68","sha512":"1dd85173794a087cb6bfa47ae36c2c25f6d45b6a48e6f9a46703048111d3f7b48f322276b98963fa78898ec6957a20fb63d82203c77199191380356f74b4b6c0","ssdeep":"192:Vj9jhjOtK/OaaUl8PzxzC081B89h7vlCeNA:1//FbtAh7vlCeG","tlshash":"e9e19866f9f925be1097827231ba7b193de48013ee6704a576edc1720f8df85ee07284","first_seen":"2026-09-14T18:47:41.348693Z","last_seen":"2026-09-14T18:47:41.348693Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/wpforms-full.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.431Z","timestamp":1789411617431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/wpforms-full.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVZql4E2HuUdc2uHFUn4udR7RlaQyHqquKKAqFBzouzpdnZfYqwtzdNwjG2OzqZ%2FvRuEs6Arw8d9XTfIYHEaQSDpTfSbkwQeElBENa%2FDkarLzfU9ovsDc%2B8hOhpLCcFchNoaP80%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-26f4b\"\r\nexpires: Thu, 24 Sep 2026 18:42:34 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0ff94fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159563,"size_decoded":15958,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1720a17fa2d0c30f2d4085116b62f6d8","sha1":"0879f16171b73bff13acb47dd345857e0a0e38b5","sha256":"35af4ece9e6b61f9b1b5028365186530ae7e5807bc3cd51d8ddcb5704b6ba6ad","sha512":"7e6fcaf9f5bd7f304cab989d981954e4c451cb7e6781b3acfa9d93aaefbdefbb8ecad9740c3e60809bcf6f5c92776881e7ad20dd0a0a02be6ae9cab1c138cc6e","ssdeep":"384:LjiVXOzWsXLOgn7bW1kOgzR6oI1B9NsokLXbR73glV0teDL6/2CFbaFwi/2o4W7t:LakOgzRho+uCro4W7LajBosVBMuCt","tlshash":"27f3cb398b016ffae9bf489e61cf87c30b12cf23de455eadba138826dd805621513765","first_seen":"2025-08-18T20:52:14.071004Z","last_seen":"2026-09-19T22:22:16.784381Z","times_seen":6,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/speakers_membership_482x417_peter_diamandis-27-min-1.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.809Z","timestamp":1789411617809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/speakers_membership_482x417_peter_diamandis-27-min-1.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zeBnnb9nEBhMhGEgFsTbEoxTLGjTaDR58Yqm3g2LzODaWNNhDZYXmVgNXuQXgoty4ITil31Suo71VzJxCGESQ7vC%2FYceRWgrJJiywczyFVCgUc84zxZE1HnjIKJq4hCF0%2F6pvtY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb36879fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7947,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"a25a7c6eef9b542e5a034af947725d0a","sha1":"01f0daf5e45c78b0c50a9a0b98c6879dd60d4805","sha256":"f9ef2ab13a95b43f0f15be2c51d13b469176578d0def04c018b4899c2c53f6d7","sha512":"50c01db095d11eaa9f8f34804bd388294c776746af145bd5e1a781b564a25c7b57375437bb846b4f44b561b27459601f8bb94913aa6e5ea999221fddd71a65fc","ssdeep":"192:Vj9jhjOtK/OaaUl8PzVzZ081B89R7vlCeNA:1//F4tAR7vlCeG","tlshash":"a4e1b866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df81ee07284","first_seen":"2026-09-14T18:47:41.35043Z","last_seen":"2026-09-14T18:47:41.35043Z","times_seen":1,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCs16Hw3aX8.ttf","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.957Z","timestamp":1789411617957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCs16Hw3aX8.ttf HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FlpGypSlwOQIB1Pe7McjLbPdEISonhB0rKM05EHjH3OMukEzbX8gCrCn1Ubt091146v1K6JgH6bRdo%2BQMlq7pKyKGLFQA6V2B%2B0HqJH%2Brw1mmslTmlHWMh%2FRQkt8I35VfInwywY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb498d6fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7953,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"23d9caddb3e9e50250f7f1a25a354a5e","sha1":"1d516c23219c34927f63574a1663208fa9e22ac7","sha256":"f779d9917d1cb0f221bc7af4fa17b8f7723b1c259f5d4cc565cc0f2e88480d6d","sha512":"69039271b30dc9eadcd26a7bbd75325bff5d83359a0516ab5f72e0ca660b2e4f9511c2ea876651c1161a997592e8b43b5893b78c2eb4414ae166b4f2c7841c20","ssdeep":"192:Vj9jhjOtK/OaaUl8PzJzC081B89V7vlCeNA:1//F/tAV7vlCeG","tlshash":"a4e1a966f9f925be1097827231ba7b193de48013de6708a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.351452Z","last_seen":"2026-09-14T18:47:41.351452Z","times_seen":1,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_10.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_8.html","date":"2026-09-14T18:46:58.133Z","timestamp":1789411618133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/index_10.html HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_8.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fl7TYHE6OApE2L%2FQs75yeW9wd%2B1uqLQCnDc96fImXhUsaINsnF%2B%2Byq7F%2FhoMb0LfSSdovcksO4uoIufs43CqhZh4SoUjY9B%2B9Drp9Z6DWugZL5ZTehoF0NeaTduAm4KpYUzMcE4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a3b18eb56928fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7959,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8690a1ae2c92a7f2ba69c3b5cd1b08a1","sha1":"a0fc1cb65551a2d5ed81e42de32e0a0d33038d7c","sha256":"fc6dec0fb19307dff4b92278cc1944d7a879d6311feab14e5e33580eb0b7f4fb","sha512":"1e904e2b627a84566ba76fb33afd117b5dfaeade409de3fad74cbb68067bfa0ed085707a7512e47dbc3e0dfe437cf0f41ef16e24bdb21df6b28e33cb893d1799","ssdeep":"192:Vj9jhjOtK/OaaUl8PzczC081B89g7vlCeNA:1//FgtAg7vlCeG","tlshash":"4de1a966f9f925be1097827231ba7b193de48013ee6704a576edc1720f8df85ee07244","first_seen":"2026-09-14T18:47:41.352424Z","last_seen":"2026-09-14T18:47:41.352424Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_11.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.583Z","timestamp":1789411617583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/index_11.html HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cd6O7D6SdJ4gwQGzxCjNjjnEjq2ulhPy46XVrLZI6k44k4gi28%2BBbFlcXZLJoIU%2F%2BsiKCvfnrrUSt%2FsP0rBtRClmqH0I6EFeEQuQNzwfOYgez%2FeqLhhp9H%2FGw6tLFl7RQt%2F6MLg%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3b18eb1ffe7fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7125,"size_decoded":3752,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (6265)","md5":"ec87c09f990234186a771d615560fb33","sha1":"469878b4e194769ce627cc2d4d670a944dea7473","sha256":"43536671f48ef03bab627199c54b114f9ca0f61b629539c333acf5ae26bb7100","sha512":"c35bc850814f8d6c3132303cd0ac4e8f457acc009528df15a2c5ece25312b3e0061300f134d3ad552a19966d2c9d5e2225cff02d29c71e3cc30c4fb71518b325","ssdeep":"192:mk23Ckoy/LSsEk+3nRMkAozoCmUoxwVyK1:m73toy/LY3RMkAozoCm3xC1","tlshash":"bae18479ab200777989fb8f98fd5b0c03d27ca37a6055a60395ce106a7acd3446bfd48","first_seen":"2026-07-21T03:18:43.161011Z","last_seen":"2026-09-19T22:22:16.869122Z","times_seen":5,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw3aXo.woff2","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.659Z","timestamp":1789411617659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw3aXo.woff2 HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=trlwb05FcuT8ejGC5r60Um1bSAnEmSOxdWLVgwVi6t9%2Bclknl2ENwOMfNJoxc0Wt0Sa1b5%2F4O6T4pv43pRHAU%2FaJMerqrhBIx3kA4tx73w%2FV69I6lkFFruIwnlNym6pBpUsrR4w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb2681dfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7954,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"00d01684bc51d44994a4050f37b94830","sha1":"6b9b7ff7dc38450398b9f046678bf5cb4158b0dd","sha256":"007c1042b1502f4639d939d61699df328380fbae5c3b56f62d0110125048aefc","sha512":"6fe5f019f7d3d5878e74d6cf14151d9d1e7b5751f041f3332e758f739f8bd37f6bce5ecb17dcee7d551a7e335d8c97dea4366a09a4422188fc72383468ee03b6","ssdeep":"192:Vj9jhjOtK/OaaUl8PzXzZ081B89/7vlCeNA:1//FatA/7vlCeG","tlshash":"abe1a866f9f915be1097827231ba7b193de49013dea604a576edc1720f8df80ee07144","first_seen":"2026-09-14T18:47:41.354231Z","last_seen":"2026-09-14T18:47:41.354231Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/frontend.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.380Z","timestamp":1789411617380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/frontend.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=evZIwtts96Rgy13Nku7VgHMNm6xMD5C2fC%2BLkP%2B7vSi72HzB3tibvl5takIm3NJUXMC7PHDxAfNGlH9nDEvZuRaDPtgs60ZoD%2Fr2gvEHHDu5YcL1QnlLCVEIj%2FBzsZJmpb81T3M%3D\"}]}\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68c93102-422\"\r\nage: 267\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b18eb0af5bfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1058,"size_decoded":1220,"mime_type":"text/css","magic":"ASCII text, with very long lines (1058), with no line terminators","md5":"6f71106c7a6d664e95df0b3381ab7a53","sha1":"3aa8ddcec63fdd455bd8a4ccb34da371dc17b10b","sha256":"0d585aebb9cb31821fbcc6b030e0d882b5639e17bb403f8eb5ce7b3b19f4a1c9","sha512":"0f399b5d008380ad0ddef3328e344b23711dfc88817bfd3a303aec684263ceb4fa4c6ca92b48f0f20d6257f0924f441efa3d90e6a6389759d9c8ba49b00a38a0","ssdeep":"","tlshash":"6911893d8221b408b33f870a25cd66451835264360b21a8dffd2b901e7275de3555796","first_seen":"2024-06-21T17:31:29Z","last_seen":"2026-09-21T00:11:04.065724Z","times_seen":4451,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/animate.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.381Z","timestamp":1789411617381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/animate.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VbRRUb00Ot5Ikp%2FaaZjg4jc5DhX7oqSv%2Bv7Eey31xbmRkhAcR9DRLSNsEqOgV%2BbEBQ5iXh55s5gJOxC8VyRfRBGauctJbdGu87rh8Kxva70qWrMrXv9TZ0oAtkdZGcxFT%2B8tUO8%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-e2aa\"\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 267\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0af5dfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58026,"size_decoded":4856,"mime_type":"text/css","magic":"ASCII text, with very long lines (57833)","md5":"37e40fb2401e9d466c5588da228b2394","sha1":"49641a74b404ae91e24d8a1c97fb3666b5d6e3af","sha256":"1e0311c1f09f8970cfee705d565137363e612ffdfbe8d02398fa4d473ba25a92","sha512":"bb3f1be0892ceca6aec51a3bf92e7be8e6f2dee23cd94075026f353ed957b9586686a27f8e381db80f9073d8690be5244851adcb762e05c276e6ca0e670004d7","ssdeep":"768:ekZbIJImb9IpIDPYwe1uA5kGDj3Cyg5lrce20qTIsFs1:ekZaPYwe1uA5kGDj3Cyg5lrce20qTo","tlshash":"f543f7af5891128991264ba6c7cc4e68473dc67314621cde73826c4b8f87faf33da647","first_seen":"2023-04-05T15:58:59Z","last_seen":"2026-09-20T23:25:01.104533Z","times_seen":2388,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/style.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.394Z","timestamp":1789411617394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/style.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PEhnOwst2AsLO5qAod3cHn62yjlC6Cl%2Bm3M02LDN%2Fi2ycu1lSEzgSbSCrvgFfCedl2i1TwXtkbZbgbXC5xkQCe6r0U7E7mbV8OcIjBd7f4sd0ylvMx4OwBE7Kh1VDQUlzRSPOfQ%3D\"}]}\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68c93102-9bb\"\r\nage: 267\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b18eb0cf6ffea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2491,"size_decoded":1464,"mime_type":"text/css","magic":"ASCII text, with very long lines (2491), with no line terminators","md5":"5cbdf141b5cd20aeba67e6bab5db78f7","sha1":"7605f6d767054f68c9d2e381ac4ebcdb0984ca89","sha256":"13161620ac821e80048f8b8c4ebb6aeffdf87950d1b93317998ecf1a77bef0d9","sha512":"d06f47a1b53711ade03e0ea9c51d149ffc82db7c591c3135ffff46f367640f4ed1de4377066bac8bf7eb0c6b9180eb9b5101255dcc7fc0805b1aad66c1252862","ssdeep":"","tlshash":"fd51862e585071b8d01b9d1456cc4f792e2de623dd3240ffb316651f428269cb225f8f","first_seen":"2023-06-17T15:46:40Z","last_seen":"2026-09-20T19:57:01.709126Z","times_seen":214,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/font-awesome.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.404Z","timestamp":1789411617404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/font-awesome.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LSeQ8oEsGiQDpEY%2F4DIrAhpEHgz3GIwdLamA6dbjaOkyz8n48dMnGrj456M8Y1O6dEASVxPyRJbtmKD6ck0lHFkGUvxUlak9JdtMyh%2FARDTUm6vGcu4t9tXIjEm2lFtx1YSI4tI%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-7853\"\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 267\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0df7afea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30803,"size_decoded":7788,"mime_type":"text/css","magic":"ASCII text, with very long lines (30640)","md5":"3b08091d72505c0e7057bcd09490f794","sha1":"5da5416e9b459e2e5151dbb4a7e6548d3e277744","sha256":"7fc22d7e1ab1998fffa9f184255a4aa196b624377400dea39b6a1680b9c5bdb0","sha512":"4bfecbf5f4028453f31e564f1a72b794c2b062adab8ac09b05d91cf53ee61820ba3dc9886a5f55c47bffdaf73ff3b81a1e699ef7f24807d78e5e4376e4a81aeb","ssdeep":"384:Du5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:Mlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"fbd241e8e54c01d66731c48bff81b36862bafb3dc5854da9f01f290c29d22a552c5fb9","first_seen":"2023-04-10T10:49:20Z","last_seen":"2026-09-20T22:19:31.531296Z","times_seen":78,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/wobi_membership_short_re-uploaded-1080p-1.mp4","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.598Z","timestamp":1789411617598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/wobi_membership_short_re-uploaded-1080p-1.mp4 HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=4,i=?0\r\netag: \"68c93102-f7c05a\"\r\nexpires: Thu, 24 Sep 2026 18:42:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 266\r\ncontent-range: bytes 0-16236633/16236634\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDzGkfLfsaiHcAR6icGLyFtLiS0IvtB8Rl%2F7WuZvEl%2F6d29eGYbR8%2FxQmM5EPP4PZ2hSfkl60al%2BWZf1QTy%2BEvcV5YYksymUFjfvnvlInnOZDOWUV555ubxH%2FrCOajnhBMefqtM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb20ff4fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16236634\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/41d27ba5-8f11-4ddc-b798-5d2d53f83673.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_5.html","date":"2026-09-14T18:46:58.018Z","timestamp":1789411618018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/41d27ba5-8f11-4ddc-b798-5d2d53f83673.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_5.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YANfa1JHFl8g%2FsgE5sgV%2FIc0KRURH9pk7Hv0En0%2BwsIWvaM4EkBMfnUJQgia8EhRROmHyIN0O3CVoWPr7HZWewhBzXgIf8sdofLcRQv%2FzddjDSVvZFsxhOlk7rO7NwE%2FvJlCDnc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb4b8e2fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7955,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"da97c2729cd9af3623bcd977a9c922bf","sha1":"20a2def6becab10be5e5206bd7f5be687a1082f4","sha256":"292a2a435c5e41025c13f3d559f2468517295075272fa3122a07491cd9bca859","sha512":"e80386dfe005beb3b339dbf2049a0993b4026a1b56ddc146f47000ed93318cf3d2b1d8f8af30ba0f59c911eb4e77ae692c5ea4c82c84470babdefaa20197ec74","ssdeep":"192:Vj9jhjOtK/OaaUl8PzzzC081B89j7vlCeNA:1//FVtAj7vlCeG","tlshash":"3be1b966f9f925be1097827231ba7b193de48013de6708a576edc1720f8df84ee07144","first_seen":"2026-09-14T18:47:41.358177Z","last_seen":"2026-09-14T18:47:41.358177Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/fdd1e84b-50f4-4e2f-9087-65d64bd724d3.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_12.html","date":"2026-09-14T18:46:58.021Z","timestamp":1789411618021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/fdd1e84b-50f4-4e2f-9087-65d64bd724d3.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_12.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j9kJQt02wpJslCuvwJ186U4SRKrdri56lJbT4irFLvpR4PIVSdJAMdYBw3JUeMjw4z67nIkMvWRDmNJPkhOo8v14B5AF1T%2FdBOD2FnKhV0c%2F7MVWv%2Bp2RvfNDMgdrqu%2BXbtJy1E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb4b8e4fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7953,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"828cf9ea82040fe75bb4441762e5f522","sha1":"624e2e0945d6b392a705f049c3c236ee18d47562","sha256":"1ef3064419a4a04fb9cb655cfb1b85a5f439ac29c4ad8a8abf7ed040e9bd2762","sha512":"e6140b3a90ba264ebedc4e5e1b0f57a8ce4dad3d6c0c1f8554d4a989a66db8bd6d1ffe245be7fdbb16ac281f57c8d8887728287ab6cdcec6240394166b194c53","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz1zC081B89t7vlCeNA:1//F3tAt7vlCeG","tlshash":"38e1b966f9f925be1097827231ba7b193de48013de6708a576edc1720f8df81ee07144","first_seen":"2026-09-14T18:47:41.362431Z","last_seen":"2026-09-14T18:47:41.362431Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"performance.radar.cloudflare.com/beacon.js","fqdn":"performance.radar.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.30.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_7.html","date":"2026-09-14T18:46:58.346Z","timestamp":1789411618346,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /beacon.js HTTP/1.1\r\nHost: performance.radar.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: no-store, max-age=0\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\nreferrer-policy: no-referrer\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=AUpSuPGvg3qHa9uFzX.buWOIFlSFc2XxcALtmx6kGTY-1789411618.3774283-1.0.1.1-nbyJsTsbhYbHPjlbKrPez.PNSpDIGjn2IY55hJ5yxTtA9YCO5DL3LZNvRLlzBfwljTWumH_SPAjvCKynWPhS2S_C.A8ftg6SHH6SwtitG.d_llg7IXU9J.uwI54.CXl0; HttpOnly; SameSite=None; Secure; Path=/; Domain=radar.cloudflare.com; Expires=Mon, 14 Sep 2026 19:16:58 GMT\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3b18eb6df920b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"AUpSuPGvg3qHa9uFzX.buWOIFlSFc2XxcALtmx6kGTY-1789411618.3774283-1.0.1.1-nbyJsTsbhYbHPjlbKrPez.PNSpDIGjn2IY55hJ5yxTtA9YCO5DL3LZNvRLlzBfwljTWumH_SPAjvCKynWPhS2S_C.A8ftg6SHH6SwtitG.d_llg7IXU9J.uwI54.CXl0","quoted":false,"path":"/","domain":"radar.cloudflare.com","expires":"2026-09-14T19:16:58Z","raw_expires":"Mon, 14 Sep 2026 19:16:58 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=AUpSuPGvg3qHa9uFzX.buWOIFlSFc2XxcALtmx6kGTY-1789411618.3774283-1.0.1.1-nbyJsTsbhYbHPjlbKrPez.PNSpDIGjn2IY55hJ5yxTtA9YCO5DL3LZNvRLlzBfwljTWumH_SPAjvCKynWPhS2S_C.A8ftg6SHH6SwtitG.d_llg7IXU9J.uwI54.CXl0; HttpOnly; SameSite=None; Secure; Path=/; Domain=radar.cloudflare.com; Expires=Mon, 14 Sep 2026 19:16:58 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript;charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/et-divi-dynamic-tb-1938-tb-1942-278183-late.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.389Z","timestamp":1789411617389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/et-divi-dynamic-tb-1938-tb-1942-278183-late.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k5BHvMqxLlppkOE4NGZUMSuoZO7l6yBfRw8t58rMf1wseRiZjmtjcrEu406QjrxO0hOxcotGIOWQZNXwI36wb1P1dzNV%2F9QKhQ2flE8d68K%2B%2FXgzDS1sQTLswEIxQ7Pn%2Fc7S%2Fww%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-45bf\"\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 267\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0bf69fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17855,"size_decoded":2476,"mime_type":"text/css","magic":"ASCII text, with very long lines (16772)","md5":"4012b8b15a8f630fa8c05407662b3d3a","sha1":"53dde35523a2ccf3b0f33270049f8a9389453609","sha256":"d0ba700428a8c65b25d0cfc9c89541ded995d2babade746917f223c3ff66b577","sha512":"33484abb8a75fd967ec4088e56304230622468d17ffda5059c1a3b9513fe4055235b93e01b0bf4e771cab7d7fa533bb0cda8ba35bbe9528839828f79ea6359b3","ssdeep":"192:LWlfOFOBx8Ivx8Ih74lMJoMOWJBliwEFTi0:LfImI1DoMOWJBliwEFTi0","tlshash":"af8217af8ad2325551234e66c7cd4e684b2dcba318611cde3651284fcb42fde72e621f","first_seen":"2023-04-07T09:28:44Z","last_seen":"2026-09-20T22:00:15.297516Z","times_seen":1505,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/main.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.416Z","timestamp":1789411617416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/main.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Kn%2FZeaHxldEB1n5V2gSvp7KsY7XpUrvlIChk76eOdPof9jeTYV6l7hTIiuyH9iouv32DoUQlVlsA%2FwGAlfcyDVU%2BjieiHMsgUIPyOFIlWoAw4vbWzJhWTq3bfXcKKVt%2FLw6Y%2F4%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-1ca2\"\r\nexpires: Thu, 24 Sep 2026 18:42:32 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 265\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0ef85fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7330,"size_decoded":1997,"mime_type":"text/css","magic":"ASCII text, with very long lines (7329)","md5":"aa24f2c14d96072dd0faf4f1eb6d5b48","sha1":"d871fd110c4d56ca6a61f4678950b5c5a9e52b76","sha256":"f635538e25f3ec4b0f06adb2191c0a8e200c68a6227623964a8d0ff6cc7d1175","sha512":"dcc5e54d6c697559d98cffaef154ebe2d149e15182b7e777e34aafa7a6419c8f6f8995a0e9ee25312aa350d7058a2b0e81f77e10c9494d2df8295ec31c7bd5f7","ssdeep":"96:gwZ5+h4C1WEshlAL9ZLNuzIvnQTu5BQTtQTA/ZQTZQTLQTEQTAqYBvTYuUZNSNJn:PZuofuCk7w6JmWuUv3O","tlshash":"34e147b023116fe9ed5f418a21cfc7ab1778cf01cd42de6afa6264869fc5972411b722","first_seen":"2026-07-21T03:18:43.109286Z","last_seen":"2026-09-19T22:22:16.930005Z","times_seen":5,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/The_World_Business_Forum_Experience2.mp4","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.600Z","timestamp":1789411617600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/The_World_Business_Forum_Experience2.mp4 HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Sep 2025 09:52:20 GMT\r\npriority: u=4,i=?0\r\netag: \"68c93354-4515d49\"\r\nexpires: Thu, 24 Sep 2026 18:43:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 220\r\ncontent-range: bytes 0-72441160/72441161\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oz7%2BS06vg4x2iyE4VRu3XG2NIn8%2Fz%2BbB1etStK3UlXl3d4NDTvnpkjBoLTENAhoZ8BcfAgyMGLjYBPGhnaGLqGDaakGc7NMEAphTQhVn%2FkfrEOI5Qj%2B93xsPn4AGumRIUPAIkxo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb20ff5fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 72441161\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":758238,"size_decoded":759046,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"19b586ef58efec17641519a3e1761438","sha1":"2525359e770608cf90f3de507053a5fe6e137ab2","sha256":"aac62fb2f287cbb6a37fbd7d4e677b5a21397aa0f4f8c7a101204363ff1e3904","sha512":"d8d0a8c88e21f2ba99f9f9a2bbde613680debb6e65638601c45e668f62c2ccd9e96c51ebd1c135f36a9a607c5b470ee784dc5783a2dc75b7c34bb3ec14e84e8e","ssdeep":"12288:N6/56YPlceL+M+rGaaRrvMimMKvQGXukEWrDgLpS6ADROSOExSnXHCQ0HmgNX35v:WeLGa4kpI1W8pS6s7OExSnzift","tlshash":"b2f42352fdf55858cff13876ae9a808232080ab303c413d39b54be32ed75b98667613b","first_seen":"2026-09-14T18:47:41.364739Z","last_seen":"2026-09-14T18:47:41.364739Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/ALPINE_COMBINED_LIGHT_BACKGROUND_1_1-min-1280x906.png","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.798Z","timestamp":1789411617798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/ALPINE_COMBINED_LIGHT_BACKGROUND_1_1-min-1280x906.png HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=veNqmgf1xUvnR2UxNHXBOAvJV2y4OUdnqGosJQMdZqdzTac%2BOkL2advM5smTU8o7p6ueaxSmT9wMzRfI7Xrv9cwtPUi2H8WacSpYOq7VGSGx3CcPJzfV2HCRXKpabriQfRFRQ7s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb3586afea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7945,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"2485c062927783789475d4df75dc8732","sha1":"9eecea7161c2c66dabd8a1804baed8bd0daa78c3","sha256":"4d04dabbaa23c350494bb228db04722c3ae4fec683848d1dcec24fc88e4577bd","sha512":"48bad9a9d2630047f8115035a7e7022a75e71c483b881557bcfdc9cd337f216f63180cabf236a62f29742b100ee0d452ebbc29ebd60c2e6d3e21fa6fbdfb0015","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz3zZ081B89v7vlCeNA:1//FqtAv7vlCeG","tlshash":"3de1b866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df84ee07284","first_seen":"2026-09-14T18:47:41.366531Z","last_seen":"2026-09-14T18:47:41.366531Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/speakers_membership_482x417_amal_clooney-1.png","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.810Z","timestamp":1789411617810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/speakers_membership_482x417_amal_clooney-1.png HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v8jnWIDR52J9sH2GX9yMOwwO2v6%2FhVctvnemc4aWNDG5ksmqYG3PC4nYoHURRoqaBEqiw7JbPQRfbTcOaV4Ke%2BU5%2BALdW2JV7ClYsO7jCqaxRZjchMh0e44QLKMxFvUnV%2BkmwJU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb36884fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7951,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ebf69880dbb45842e246fc737dbbaa7b","sha1":"099be63af2032b20be97ddccd79f96f4ec39b9af","sha256":"0c918258a71b785e2a323156af4ef07020fc2682d6c694c62ae9a67579c190c4","sha512":"fe4fe4550fce7230377adda5e7df1418b8f5108a029e18736eca16cd46f3e439b4292bbc2a03f8281323a91f474244a207359d80bb270e009391764582b57b8b","ssdeep":"192:Vj9jhjOtK/OaaUl8PzpzZ081B89d7vlCeNA:1//F8tAd7vlCeG","tlshash":"12e19766f9f925be1097827231ba7b193de48013de6608a576edc1720f8df85ee07284","first_seen":"2026-09-14T18:47:41.3675Z","last_seen":"2026-09-14T18:47:41.3675Z","times_seen":1,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/10f397e9-9730-41bb-95be-b5bbe9cc69f2.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_1.html","date":"2026-09-14T18:46:57.999Z","timestamp":1789411617999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/10f397e9-9730-41bb-95be-b5bbe9cc69f2.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPCofQCEEaGBnqf2ICoMKQ%2BMduzExvVoTqYXNul%2Ftq9L7IQhe4U9XDjqGPfZK2MylLaiKE5DVxAxbi%2BDaRSBhMD4tBZS5QYonMKKLSpF14EIeB1yd1GgI650Tyb%2BjXPmzN%2Fyl4Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb488d5fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7955,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"0ae846016542a904f6caaf7ba815ca35","sha1":"c8c38f518bc7ab1983ae5a341b85ccbdda5f6f72","sha256":"080f6c5ef8708ddb66786bad915d80d8c01b8041f4b49ee875ee89ce59441133","sha512":"e8669b4391fb4950f996ccc7d731f5b2fba4e79d8b082ede33933748125d79f9e71056fb76433992758cdfef62be93da24aad6341dd8b5ad6359c674d456af1b","ssdeep":"192:Vj9jhjOtK/OaaUl8PzRzC081B89Z7vlCeNA:1//FztAZ7vlCeG","tlshash":"bbe1b966f9f925be1097827231ba7b193de48013dea708a576edc1720f8df80ee07144","first_seen":"2026-09-14T18:47:41.368861Z","last_seen":"2026-09-14T18:47:41.368861Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/5e7a696b-886a-4acb-b84b-cbf00eff0e8b.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_11.html","date":"2026-09-14T18:46:58.119Z","timestamp":1789411618119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/5e7a696b-886a-4acb-b84b-cbf00eff0e8b.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_11.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l3jSVhYWW9iKk8x6cA0ZfUWxsAQ2vlwxgDKJ42BUjcdTStFR6QihvIPL1npMh%2F5lqbSEniIvRoxDaI4slAjuVLvc8mHlaAb0mzHqhW8axxQJnNNErCEoavT1PBZwUwV6Eepxyq8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb54910fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7947,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"54a5d6e0ea25f75bed3838c485e92e0d","sha1":"b0cd5607490c217794853c1e40007a3f7be5b031","sha256":"2c09cbf748146d1bbdb825bc9b54cc4a96817912049700a7bdf9989c7cb4961d","sha512":"b1981b1e160635cc673ed4ef53fd7defeee8ef45e91b9fd98dad3331eb4e7eab6e8338061ec9eeafe39fd6d8bd74260bf0fcb05671d6b432ab95a8fc10db10f8","ssdeep":"192:Vj9jhjOtK/OaaUl8PzPzC081B89L7vlCeNA:1//F9tAL7vlCeG","tlshash":"52e1a866f9f925be1097827231ba7b193de48013de6604a576edc1720f8df80ee07184","first_seen":"2026-09-14T18:47:41.369935Z","last_seen":"2026-09-14T18:47:41.369935Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/cropped-cropped-wobi_favicon-32x32.png","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:58.384Z","timestamp":1789411618384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/cropped-cropped-wobi_favicon-32x32.png HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xu8qqcKF58mUDWuf3CQaV%2BNyhlD%2BKfnUx6hlTP6ox%2B%2FN1O4xeGZ6XWLD7qUBcttP8sJKfAhXLZk9ZizkaCd1GijhhVm%2BpuE7kULL5Yq9yv%2BBdqnh2ylQC6w64bCKv%2B4Z1hiKvUk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a3b18eb6f99cfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/trp-language-switcher.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.385Z","timestamp":1789411617385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/trp-language-switcher.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQDQ%2FHk7qLJtmdyjlEkqlgMMDXMk1HIf7OQgE0FLRyVr4tOsGSKJKhiJJOCLpLXbOHi9%2FYzv%2BkdLB1z5laHUejYRyX0%2BcyOmb%2FMYGKjrjxtIk51q6Z1%2B3KnKNvdC9XxaXellqD8%3D\"}]}\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68c93102-bbd\"\r\nage: 267\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b18eb0bf60fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3005,"size_decoded":1757,"mime_type":"text/css","magic":"ASCII text","md5":"9994b7babdfb96e4081ca735b5801fc5","sha1":"7a90c15c876c25ee7bff72b287cb34c1b2431a3b","sha256":"ff6adc7a23ba321af99d9a4c178fba06471d100fc22585c8812df9d4a3ed250d","sha512":"36dcd9a82811a0ff5f2464645a3a7f8c41697e95e0214c91dd12d5547af27e886b23b61c7bb232d0f1affeb0a84a460ff2cb4b4870967611dc52764748737359","ssdeep":"","tlshash":"3e518cb15a734541f00b8360baeba78d52180c33c009fc1dbf9d721ddfaa5a4aa71b66","first_seen":"2026-02-02T07:44:03.823048Z","last_seen":"2026-09-19T22:22:16.802494Z","times_seen":6,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/content.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.399Z","timestamp":1789411617399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/content.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9bcne8Cyevn4pEuleTSXb%2FJCDuKu32%2FCsU8hWu9e7BsnD5I9JO8qVosFVTFSfKrEUUuuWvOT58FEchoLGESNpL%2BTvn4fGPUOx3j4kFXzgKiI9K2BPMyDMrki8yxgOe5Fzg29O3A%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-201f\"\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 267\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0cf75fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8223,"size_decoded":1748,"mime_type":"text/css","magic":"ASCII text, with very long lines (8222)","md5":"5933cb192c701e1ece4c6fd1181122cb","sha1":"1bf48cf23fdb2a0cd861ac6a651f662ba721a565","sha256":"f98297d2785a10873e07d7af4d2c6d733d730f0f2b4336288c3c63a235e81a3e","sha512":"b280139fefe3ff6055889d6b83a721b7ccd0afbaa96d0d085c4e9644daa18db3d45d4afc5e9f5c558b447633ad1b053f863bab32f5baa41be9d8171e4d91352c","ssdeep":"48:VbnWuwG5jhYFuIlS3apIBj9l9OHfXgPmxQIz8rVDsC7:JgqOLltpICHfzX2h7","tlshash":"d602937815627eaced5f55c6a59eebe39b49cbaacc2ccea49f5358074ac0200d047378","first_seen":"2023-12-26T14:31:44Z","last_seen":"2026-09-19T22:22:16.778918Z","times_seen":1203,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logos_web_700_aireuropa-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.799Z","timestamp":1789411617799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logos_web_700_aireuropa-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aozfXdFipowXsM%2BxA2xN6i9HYDxt%2FRH9o9PPt5f%2B0O%2F9ahhBhaJ8YiVCcH5gKVV7jDwe4ZO4lM97XjJFnEB15mV0DVj%2Fscj7Wpdw2SC4ibYqDLBgen5JhLJZDrUUgeRkWrpv1w4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb35869fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7953,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ff9ddbaa023dba419bd38903426b7667","sha1":"5781d428c4246f2e837ca7044938ae16b83f5c7c","sha256":"e9890f3b6479bf3caa5c587f9051f45f80a8eb806676449eee7abccd7f9a90d2","sha512":"c764145e86c8bd0f379c7549952c816b9d01f1f6d9ff7b0c64c9481be6c712e2e3c272869dca63d5c0ec6ca54354f14fc6353adb4d9ad58bac4a3edee8f4e996","ssdeep":"192:Vj9jhjOtK/OaaUl8PzvzZ081B89H7vlCeNA:1//FStAH7vlCeG","tlshash":"75e1b866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df85ee07284","first_seen":"2026-09-14T18:47:41.372444Z","last_seen":"2026-09-14T18:47:41.372444Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/fa-solid-900.woff","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.906Z","timestamp":1789411617906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/fa-solid-900.woff HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2F17P97Pgwwf%2BGyU%2F%2BY38XuT2saOLAdioUZFFS5dBsKcxCZDfxOBKrNE3%2BOjlFr%2FNi3kIibfo%2FHB8yTi9mDTF5yoOP0IxmVMirNpDqqWFNBWsHy%2B23NoCXhWlyfuA01FRb5gHVA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb438cafea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7962,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7cff2850d08119677755914213805a91","sha1":"46016f290568f0ab9856a2ad573dd2bf764c4af0","sha256":"ed3f3835c5834038513252f0cc19193080cbbfd696b0503921c5ea2de44ab545","sha512":"05565a11ab8b31d3ea3dd1a3621a64d7cb88fc6f557847e50ec5d16347545e19baf14b2055550ff7bba629ef18b79ebf92ed3d16e3c16255fa8c76d6e42bbd29","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz5zZ081B89p7vlCeNA:1//FgtAp7vlCeG","tlshash":"d4e1a966f9f915be1097827231ba7b193de48013dea708a576edc1720f8df85ee07184","first_seen":"2026-09-14T18:47:41.373302Z","last_seen":"2026-09-14T18:47:41.373302Z","times_seen":1,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/front.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.388Z","timestamp":1789411617388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/front.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nxwz836z84gfmwlThhDajKwPVc%2FtqLrPVAE%2BpPmpgvPCb85NowBoyjhFMrRrNg%2FCtGD5jMF0FShj8tAUXWwP4ZmQooWSwFFZVOPHTFBrnsECzaRpBl%2F4Jh8M2eBDwPElJ4mnvVk%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-1c27\"\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 267\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0bf66fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7207,"size_decoded":2383,"mime_type":"text/css","magic":"ASCII text, with very long lines (7207), with no line terminators","md5":"50dd0d4c62de25249c136d2e52696d6b","sha1":"f65a67a93a5673202da5d040dead42960d97bdaf","sha256":"7db98073fc81982a3aecfc3b9357cba8a968e60d139cea99a17e51c682e3c60b","sha512":"1addc6a7901c03b54291132de81031ba58c9f0b0a08373e3b5f27e2d432b041a16eb8e0b21b147f2be75983caceb1421c35aba0a6b2183e982605c1652a00862","ssdeep":"96:bv/T+XFau1Q5IjLCeM8ZUktBk98tB8v8tFQRi8Dlz3DlIkz3ke0YvKveiWtHKkO7:b/yX8/RTvAg20Q02Tv","tlshash":"7ee1cd793b097e286c17668502f6472a9719f4e5a73b8bcfbc4eed20824bad33061745","first_seen":"2026-07-21T03:18:43.089719Z","last_seen":"2026-09-19T22:22:16.833435Z","times_seen":5,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_2.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.580Z","timestamp":1789411617580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/index_2.html HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fDBuV7tac2iCkzlTVD%2FEvJnL8iGmeveXRu1cRFsZy8rCsVx8MgTu%2B6jHc3mHQeswGlIbrUa2BM9t%2B9YjKJA85NBPUH1Y4Pkgs%2BeJ89vkSj1fSI7iEMt02RyfUTWEOLI%2BayUDWmw%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3b18eb1efe3fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6031,"size_decoded":3041,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (5171)","md5":"5b3020a21838b57cca9cec97ee5d7af8","sha1":"fe28c526d97dfd60f6c746287cdfe7b2b8772109","sha256":"f86feb93c61984eb1abcd586efbd3fff3d73cc744af8732a272aa7b1b9b1ad08","sha512":"cf7ad8364af51fae2e78de3f5b8a7650580525b0c62f237307f50929d558a0878f1aba0a9fa0594b723dd1e591f74eca41abfe40d1362809a461d8976831c53b","ssdeep":"96:6mkoy/LCbuEk+3ElT6fx7gAM+kAozoCmGroxwVyFM1:Xkoy/LZEk+3SRMkAozoCmUoxwVyK1","tlshash":"6ec1313aab10077b988fb9f98f95b4c13923ca3676055660785ce106abecd7087bfd44","first_seen":"2026-07-21T03:18:43.092662Z","last_seen":"2026-09-19T22:22:16.768905Z","times_seen":5,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/federica_pellegrini-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.813Z","timestamp":1789411617813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/federica_pellegrini-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BP38hBN6k6srXq5%2B%2B8VGoIQ5xWxfDPXCj6mxgeEizzCb71EOb5GaW%2BeDxk1jYyr5YD2RTGMg45919QSO9iXcAh0lREYWlgRk%2FkTrz18PD3lJCI2Dy8WyBTR3fCOiwjDk17D9H4E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb3788afea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7951,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"c28b19d142c1755ea5c036985b579b71","sha1":"cbf15c058da9bb6120e19ca1288faa242958617f","sha256":"cd25fd70e6383b76ce6675c383dc81bf574f3d1365490ad16795e4605286d152","sha512":"6ad05fa559cde7e43663dd0927e3240f356de6f314072b9af5ff7ff2ccdfbc17de57465f0eb214e9897dd5063ee136baf77120e32659a90fb34f7a6f54c7b416","ssdeep":"192:Vj9jhjOtK/OaaUl8PzrzZ081B89r7vlCeNA:1//FOtAr7vlCeG","tlshash":"dee1a966f9f915be1097827231ba7b193de48013ee6704a576edc1720f8df85ee07244","first_seen":"2026-09-14T18:47:41.375952Z","last_seen":"2026-09-14T18:47:41.375952Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ns1p-aws-backed.global.ssl.fastly.net/a/t128.jpg?r=61314070","fqdn":"ns1p-aws-backed.global.ssl.fastly.net","domain":"ns1p-aws-backed.global.ssl.fastly.net","tld":"global.ssl.fastly.net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_7.html","date":"2026-09-14T18:46:59.360Z","timestamp":1789411619360,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /a/t128.jpg?r=61314070 HTTP/1.1\r\nHost: ns1p-aws-backed.global.ssl.fastly.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/wpforms-modern-full.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.401Z","timestamp":1789411617401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/wpforms-modern-full.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2FJbheWPGRo4f%2B%2BMfmBfJVvmM5sbsjddVUxA9ogPU1wmWffIep9RxA3iwvFjpH%2BtSDi6OehjuvMJC7Ltil3suseDi7ozl23oQr0LqeozNDhZFUfXd0igN90CJm1%2FIX5gywS4rZ4%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-6900b\"\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 267\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0cf76fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":430091,"size_decoded":29854,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6876087bde3b5a2056d2ec664642026e","sha1":"8530ffd45db9a5f9da6b715c60db53cb64c1ac95","sha256":"c728469aeaea646526ea0c575b106d1e9a588f52b2aca8b81d02dabe46fd4b51","sha512":"f2c29ff6f0015d5e03485615050571acdb29f73e7d81cf3d821276f7c12510b303f1b098f5dcc8c593c1dd02c952ca6392763e51853f2d1bb4cb34ae01cd6e3f","ssdeep":"1536:nwCqItf1aka5CNJQS7Hgo6HywK946XiUX5/D:nwCqItf1La5CIS7HgogyH","tlshash":"7d9435b916617ffefc1f568da4efdbd38f89cf82892c8e656b139845ae900115007368","first_seen":"2026-07-21T03:18:43.150772Z","last_seen":"2026-09-19T22:22:16.829296Z","times_seen":5,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logos_web_700_axpo-1.png","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.405Z","timestamp":1789411617405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logos_web_700_axpo-1.png HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=3,i\r\netag: \"68c93102-ae1f\"\r\nexpires: Thu, 24 Sep 2026 18:42:30 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 266\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VCDS3ibgeAZbxEASu%2BIEhweHBN8K0HYsV1sxPrVBdjVE4K0x%2BihkewnCzg3kDolO3E3g0lEgNoZgWc6EtoCWJIN2OgjLX6qnt80063qztoYhLPJsUs4rDMcR8i5ALt61znnGbB0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0df7bfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44575\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44575,"size_decoded":45348,"mime_type":"image/png","magic":"PNG image data, 700 x 373, 8-bit/color RGBA, interlaced","md5":"b22eb06a7ed0a3c2576d94bf23935ab4","sha1":"3f70a0e45bf86c81f4cdad1afda29ae6539e1555","sha256":"96462b7bb579a41090c074666fd16ef39a150444aeb4edf00cf5c3fbfbd7b9d0","sha512":"f9bc074c3fdb7636d01cc16fdabaaa6ce26baf6461ee4b6ff5146183812a3adf38e5bfe08563e6e5246bbbe3cd16feab773337b86233ea966ba9e662576b98ce","ssdeep":"768:1gB2Gr7XmcZudnRMJbRVQZa0OO+6OCIsVnu/sBao9Lk0hMfHSrujn1DLPp1gz:yB2GHXmcQFWfy2O+3CIsVukAo9L7MfoL","tlshash":"9813f1bd16cb510208e7ee27eda68a2136604c7fc61917f40160a4c9e67c9f746734fe","first_seen":"2026-07-21T03:18:43.126032Z","last_seen":"2026-09-19T22:22:16.779553Z","times_seen":5,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/modal-views.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.421Z","timestamp":1789411617421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/modal-views.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKfH6IAOqxhNqmmFwLHsc8dTSHE5FlAx6j76MhOzkmVzhNX025%2FldrPo7ETXSx0tx3BbQz2%2BFnFpgLBMVh%2BD8PdEXb5c1zCE9C6AvRErXmtDvELk%2F1pQEvclFIxaCIHhmqSuVgc%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-1a08\"\r\nexpires: Thu, 24 Sep 2026 18:42:32 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 264\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0ef8bfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6664,"size_decoded":2377,"mime_type":"text/css","magic":"ASCII text, with very long lines (6663)","md5":"3a04e3859c68135d4f7a17b5a5069ad7","sha1":"c914aeb6692434081bb2c2d691c7af16102480ef","sha256":"6b807e71a5a06b9010819dcb5b0c6a642e97d41dd8170cadfe085b9fafaa0029","sha512":"4013ba71241a903747dfca50756a52814f1ce1bfefd885f46236ae44407089afa2648fb4baaf0d177cd4b885f9c5e30e299e7afaaf727458f34fe1658bb5188c","ssdeep":"48:sVCZTNH3MBOJd48bAoyaEIHIvYA7k4gZNW9CHSkDwP8u9iPDuo/0KbDTlddEwBBU:scTFIAAApUUXLtLkwL/cO1VsG/XiKo","tlshash":"61d18cad6fdd1474bc7f402eb06ebb7d2e25c9828526cdaa2db7d14cc0c40c5e596a06","first_seen":"2023-04-07T01:46:32Z","last_seen":"2026-09-19T22:22:16.795562Z","times_seen":518,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_13.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.587Z","timestamp":1789411617587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/index_13.html HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3LkZ0iFoxY8Ufx0eN93eceWWTw2%2BrBPV3LepR%2FVbV5tA5AEr4pxckXlekukw8GwGQkwuNj%2F601oxFTmUOSc5ROFP3D%2BXs%2BCNiIQZC5YItkq7qVVvPiJjyAr%2FkgOYPWy9W0KMtjE%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3b18eb1ffedfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6858,"size_decoded":3842,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4051)","md5":"5e5db66019b0934cfb95e03dc9f94466","sha1":"81148f126cab6e97a49e53d094820bb52c3a542e","sha256":"c37ce1fd080ac3eda9ce2407b3a2af6f62b5e180b704d3a423fcb0297736459f","sha512":"ce0e6f1d039900eaafe394b4f6a7d0cbad6270c86b8f60499a3940cf81d2e0eb1aca235a054943d27dc03b81c2f79db44e8314c753e8d35b0054ace32c45ac69","ssdeep":"96:mzj3PaQwaN9s6+mkoy/LCBxMKweT6fx7gAM+kAozoCmGroxwVyFM1:mBDq6bkoy/LUxM2RMkAozoCmUoxwVyK1","tlshash":"25e1957eab10133b889fb8f88ed4a4c03d27893766055960796ce005b7ace6456bfd98","first_seen":"2026-07-21T03:18:43.146013Z","last_seen":"2026-09-19T22:22:16.822706Z","times_seen":5,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_9.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_6.html","date":"2026-09-14T18:46:58.136Z","timestamp":1789411618136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/index_9.html HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_6.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2Ft7nK8g3DahTAPmuwClIfMq9YxGibef1KQeoi%2FjRTJrCrs1hKvRgQF54ZHNUL%2BlP0VbAKPCc4%2BiUTpcnp3itv2wm7jiLelBU1vAtVlbpq9AO9BwPOxiL7aZ5nQG6X2yEDQys4w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a3b18eb5692bfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7953,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"df3d3454da3f51fc86489bb4d2319216","sha1":"4aee62ed76516367904f4ec7aa1e82c810188e1f","sha256":"b8935e2da79d1f8947786e788544cab436c35b294d682171d786760add4d419f","sha512":"6217462f75d3d8b3ecf1f2c13955023336a687256f25835f8fd9332c1d977558ec62e7465c68e541a11c50a7e2f1df099182cee04c22b451c6cafd838434637c","ssdeep":"192:Vj9jhjOtK/OaaUl8PzmzC081B89i7vlCeNA:1//F6tAi7vlCeG","tlshash":"0ee1a966f9f925be1097827231ba7b193de48013ee6704a576edc1720f8df85ee07244","first_seen":"2026-09-14T18:47:41.381213Z","last_seen":"2026-09-14T18:47:41.381213Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"valid.rpki.cloudflare.com/?r=6937267","fqdn":"valid.rpki.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_9.html","date":"2026-09-14T18:46:58.545Z","timestamp":1789411618545,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /?r=6937267 HTTP/1.1\r\nHost: valid.rpki.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://kerostationery.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/frontend-full.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.424Z","timestamp":1789411617424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/frontend-full.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fXht1wtmNi%2BhKYf451wpf10bkRyVn71rUdG39POYpBr6mFXVo%2F954%2FKhFjmK8mvRce1gYeC4ITiOk7mOTVhH%2FWT%2FNukvFQ6zFG3niOfgs5coJ59%2FPKi%2BUzICM4LmuljEXkMVUD8%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-33ad\"\r\nexpires: Thu, 24 Sep 2026 18:42:33 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 263\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0ff8dfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13229,"size_decoded":2884,"mime_type":"text/css","magic":"ASCII text, with very long lines (13228)","md5":"0f056252213845d2b87c2662bf143dd4","sha1":"6e47976c3423e195d4e6fae5cefd247fa7587d10","sha256":"5b7c7baab58149c8719111d047bec23e0c97fabca98fbfcf2389e4c825d1ba8c","sha512":"351d667ae6ed7b832c361c264d4b5631d8c287a9da84190093bea6682b632a78c427d0dc7394523d08db0e074af5c73168f593ee1e18200d83a01ba81bc2fa84","ssdeep":"96:sSw/2hkxFzA7rSgf34YhWkHWeTmr5dwUFDV1D1Rq+BiZXiXYhXwlMtt3g7OvIfBf:lc2hkxFzA7eRYoE6QoYl6fQEL","tlshash":"0452783de7846ea1ea6f448ee0cfa3c71715c642dea9ddce6ac368059f85265c003761","first_seen":"2024-12-15T13:27:06.293428Z","last_seen":"2026-09-19T22:22:16.938209Z","times_seen":357,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_6.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.579Z","timestamp":1789411617579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/index_6.html HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VpZVW5Kr04Z5L9o5pF3uUMZiSSNOZl13SoUfAXz6cxsfN8k2K9TPM%2FTnhC9AKf6USzeyIkBnLctbb%2FCNwJBa7HLz7%2BuyyjZkgl05CDIXOMj7JDusequnc3zr1URJMcAGDxGiHOI%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3b18eb1efe1fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15674,"size_decoded":6140,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5966)","md5":"51acefe236f8dc10472ef83e169a431f","sha1":"a1c955b83ca2546c7d2371e724dfb900daa349cd","sha256":"01cec070d94c2e38c8fb4732e8b026f17594244d9d7c57f34c9bc9569501c94d","sha512":"b77e0d45b651df9e06e93e0b28547afc69639ac6dd83a96f90c45dac403ee603c6410d802657a28edbf0f700db2b3e8107462fcb4ff673315d4691ea2e005741","ssdeep":"192:h3jMQpi+3XbEqGmD7Cl03s0oNosnlSj3A9DpCCkoy/LU69JTAVZap+4xwvY78/IF:2gDzA89oy/LXJAaOC3NMkAozoCm3xC1","tlshash":"8662fa20581504319a572ce9afca3d656d5fa225b2428a707ffd910c7eead30c3baf4d","first_seen":"2026-07-21T03:18:43.116733Z","last_seen":"2026-09-19T22:22:16.908562Z","times_seen":5,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/header_video-1.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.605Z","timestamp":1789411617605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/header_video-1.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=4,i\r\netag: \"68c93102-30fe4\"\r\nexpires: Thu, 24 Sep 2026 18:43:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 220\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b1YiqI5eiBNIGfQjadsW3gWvea5xriPPtLcLldtBRIHZKgkCSdYbJlUYT4L9%2BxO3OCgw%2BWBRcyRKgi9myjJn2deDqUGRjqN%2FGE4%2BFMMxU7DD3N9SFhMaX6N6GpohI98KKvvMtQY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb21ffdfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 200676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200676,"size_decoded":201456,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1918x991, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eaa2c15a8aff20e8163a7930125e7c1d","sha1":"9af060cc57dec9a6b23b3ded7e8cd6cc030c8057","sha256":"af84e22f7ee1f62029499997230ee9bc10b0f67d6b3ec5c31c96af02607d249b","sha512":"cf074160ec56117dc64642838b9064943b4fbb8934cbe6b561cbbf32808f7f9dd6d06b623a5c162848e364254121bd05ef541bdbf20eebfc4ee8ddfb30f3725c","ssdeep":"3072:8WW9QQJV99yML85LemFy2iWWBWWkDSTHZcZu6/UlRaCssP+PjIQSPlHbw63C:vW9JDLkLnLJW0LZZUnafsmtmXC","tlshash":"95142265139bbfb55d6cf4d9e2862f98380161ca997291882c4f3b7b627532f4922fc0","first_seen":"2025-10-29T06:03:01.362756Z","last_seen":"2026-09-19T22:22:16.924828Z","times_seen":5,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logos_web_700_kpmg-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.822Z","timestamp":1789411617822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logos_web_700_kpmg-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IR5Tsrc%2FX%2FqLkh2uI7yVZxTAWy%2BQipFXUF7QoR58C2xAhtId7uOKuEQSySGlUPte5ovSB5J4vPpMO8XdMpQNb9fgF7sEquG46BpCkdVwODxn9ubl%2F2ZZjb0aZa8Px2PRquyLJl0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb38890fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7951,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d7427fd8e128107c122fe8eaf84b7379","sha1":"ba97b636efc4568f1e2f5eecc64c20169b0920a6","sha256":"3582373ad6c976c3a05bf6b56af023bd706449242eafd67cb4735abe8ff541cb","sha512":"a2b82825e83d711726b10caff888dfa40a9d45e8d8c1df95e58f9d13ed7f9f4bde7166564f4e20456089ff522e2b9f48ac59e9929a1a9a525413d4ab0480b9d5","ssdeep":"192:Vj9jhjOtK/OaaUl8PzYzZ081B89Y7vlCeNA:1//FrtAY7vlCeG","tlshash":"81e1b866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df80ee07284","first_seen":"2026-09-14T18:47:41.384828Z","last_seen":"2026-09-14T18:47:41.384828Z","times_seen":1,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/fdd1e84b-50f4-4e2f-9087-65d64bd724d3.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_12.html","date":"2026-09-14T18:46:58.115Z","timestamp":1789411618115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/fdd1e84b-50f4-4e2f-9087-65d64bd724d3.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_12.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QhyYPISrlaqi0zRX0rJC5bMf%2BmPyfA0q6%2FQqnr1i01aiTSJQTh9KOdjmrcsmkFw7DM7I2Us4hFVNp6DVDExJpgZs0u371Z3Ymx%2FEcRDA4vvKRSWh%2B8HC0FZg4SN46UGBUNJdtTU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb5490ffea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7953,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"80090a492429b4363895af6f7e410230","sha1":"37575607e93d0c769bb1adb346e153a09d352a4d","sha256":"3999248e6f0f963dcfff27c6e8911e1e721dea2da2dfcd41751fadf8ca4e22c7","sha512":"ec570d2485cc66575a9000992ce1021daaa22623f869824fd2504f94d9f4a1fa7dea418a3e7e3288121c9ba8b3860ee698f8b1a18eb0c183f1332b720ced80b8","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz2zC081B89a7vlCeNA:1//FytAa7vlCeG","tlshash":"b1e1a966f9f925be1097827231ba7b193de48013de6704a576edc1720f8df85ee07184","first_seen":"2026-09-14T18:47:41.385969Z","last_seen":"2026-09-14T18:47:41.385969Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/addtoany.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.402Z","timestamp":1789411617402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/addtoany.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OBaatCb%2F2SgU%2Fm%2BnxeCLV%2BoLf%2FABvnVdJneWQPJ%2FqTyqNYCiouIwbILEWUyNS2fcFnEe3LYAwHo%2FXi4L9lF3gjHNXmfwlXGeJ2G8S7loJitZ1kPZQE2a2csq4Shggdu1nVi7SI4%3D\"}]}\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68c93102-644\"\r\nage: 267\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b18eb0cf78fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1604,"size_decoded":1340,"mime_type":"text/css","magic":"ASCII text, with very long lines (1604), with no line terminators","md5":"2a489d28e2fc2088b3fe0bcda8417525","sha1":"af48dd19c11ceac12d2473b2b8e216da9d9d432c","sha256":"c19e3e4151ea4933fa9ba9703c51fe20ad469237771214b1c5001d1b107ddef5","sha512":"46f79ce0ebf4897749487b9180fceec67020429a6c6928bea7f4a0814422ef840110ed9e35b1e3d5b3ff040cde013b71df298d389afbbf361de70393bf90f19d","ssdeep":"","tlshash":"9c31698b939c86e4b463e17b1da912fc2c10f75a970315a5eb70f70c80cbd8c2679647","first_seen":"2023-07-14T14:43:13Z","last_seen":"2026-09-20T22:13:10.025032Z","times_seen":22618,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/mundo-1.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.446Z","timestamp":1789411617446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/mundo-1.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=5,i\r\netag: \"68c93102-3ac8\"\r\nexpires: Thu, 24 Sep 2026 18:42:30 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 266\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l7LhSyL0iAHOtobN7ducNe9mpZc7WMAw1XPKyI3fjDniVrxqQEsy6ntdqt62GvGtqyotmj8wUL0%2FttxfCMCYBdVm%2FR7QRj8LwQpJgl3OvyfMhxfBGw%2FXpisOEzMMnxNOmCYHfdI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb11f9cfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15048\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15048,"size_decoded":15824,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9358de898c08e5eb1a5c20e673f96714","sha1":"1fd1b0c788ac03d5be8fdd5ac7f8c01ecd87f0b8","sha256":"a1690e66d48ecfc13ca341d19f1a2f98d9a33c4107bdcb21a79220363c8a11ba","sha512":"dcb3125147c71c08c4270f321348bf98b92c5684d224f186e4451c0616d3f7ac599a665b76c3bc1170a697bfe03d67bc8bd25602c9142ae9ee9a506c6f7218fd","ssdeep":"96:faN26MT0D5MdtbZPAVwzVLZgLzgHjz3mxaVRVt+M/FMkQEUuhjP6NMkdujFitscn:fNYNMtKwBZcgHP3mI4MuklFDsuF4","tlshash":"6e622975fabe2055e4c4a63414f1f692bc323343e2545845b5ce8d260f0429b5fbf29a","first_seen":"2024-12-11T21:06:58.846546Z","last_seen":"2026-09-19T22:22:16.866371Z","times_seen":10,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq5Z9WXZ0ow.ttf","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:58.095Z","timestamp":1789411618095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq5Z9WXZ0ow.ttf HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqg0v8xDT7xSVw%2FccYozRC9VrAt%2BOB7PD9eHfLEcyIXzH1CgGhCRP5H%2FMliQNe%2FjhcjPOHdLba7CRRXHUqp6zFAaiXo%2F8y%2FXcpt6ulFGg5XZd4Qk3xsB0PjDQqvm6g3aneo6FEY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb52907fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7957,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"4086ca41a6b93150761ea7fe602f2292","sha1":"bea4d9475781682e59f619501bd590d8be208f4c","sha256":"149254404988defaaee1b327646fda7a0beb802c4d03a7f65440e060c712f9a7","sha512":"daa253049f2e09a7716963c5c35055ef18f5beab7f5bcfc1d871ea331f64798809913bbd10eff36dddc0893e17223c1649854302873fc08c36223612f11bdb8b","ssdeep":"192:Vj9jhjOtK/OaaUl8PzJzC081B89F7vlCeNA:1//FvtAF7vlCeG","tlshash":"eae1a966f9f925be1097827231ba7b193de48013eea704a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.388604Z","last_seen":"2026-09-14T18:47:41.388604Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/10f397e9-9730-41bb-95be-b5bbe9cc69f2.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_1.html","date":"2026-09-14T18:46:58.099Z","timestamp":1789411618099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/10f397e9-9730-41bb-95be-b5bbe9cc69f2.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V1G3%2Fj79aCRZNLRV5p7b%2FhdC3l0Pdt%2FwxEgC0GzpyfM%2Fhd7mAWg08l%2BzSzETh8O5lPCYP%2F17hBwrytGgQqvQIBxR54alGJRl99F68Vb1BqMGWxpgs8XVP92Y9n5h4UCnQUcsdRg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb5290afea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7957,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e52278c291bdc1a536e5d5ea5ecaf7fd","sha1":"ec2ad7484414ff3e162f5450e49c329c06c7df41","sha256":"b4b68f634c47864d1d1cdff1e53bf871167994a0c166998cde417b9edc21b48e","sha512":"778dd2b52f32e09bce038bf190f6375f24ef82b7ad96a629b64cee6bd7e336d74ca193dae5081342a86c25f0afcc307a0604337863a5eb62fda04116c80f3513","ssdeep":"192:Vj9jhjOtK/OaaUl8PzvzC081B89r7vlCeNA:1//F9tAr7vlCeG","tlshash":"bfe1a966f9f925be1097827231ba7b193de48013de6704a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.389468Z","last_seen":"2026-09-14T18:47:41.389468Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/f4a6b2d5-d203-40aa-b8c3-6f7f992d6a49.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_2.html","date":"2026-09-14T18:46:58.146Z","timestamp":1789411618146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/f4a6b2d5-d203-40aa-b8c3-6f7f992d6a49.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2F5Fksqt%2Bt9MOsk5CmcINI%2Bey25NMJS2zkNxKzbJ6Bn8%2FXLLouiM4IYoDdbn60IYCFBY3J6e3dV%2F6wJvPOMjz%2FP8REDHgnkOqs5KoZK3614ZNAmt%2FLHG1NoPi2IWZFnyHfqkT0Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb5792efea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7959,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"dc73b34fb2ff59c8da5d2fe64f28722a","sha1":"ea2c04aacb693113091d976edd4ea46a170dec5e","sha256":"63a639d4edb3e832a16dd7d557c7321e63cc0af1c34d447f5a44d0e87eb2e23d","sha512":"df545f3fa05cf7f2ab727a0779ea34bd568de96a75c852907e1392c3f2ef16cc2f209bd0eb7d6679ab92b910c3cf1f473cdf613ed3610f3504ff5ef7c6915ce5","ssdeep":"192:Vj9jhjOtK/OaaUl8PzGzC081B89O7vlCeNA:1//FWtAO7vlCeG","tlshash":"8ee1a966f9f925be1097827231ba7b193de48013de6704a576edc1720f8df85ee07244","first_seen":"2026-09-14T18:47:41.390534Z","last_seen":"2026-09-14T18:47:41.390534Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/editor.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.422Z","timestamp":1789411617422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/editor.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T1VHJcQjbya%2BfOo14oUpWuZ5%2BGvQak4XMZyzTGKFgebBATMV8zDdYx9S1nDssLxJjj8TOMnmC4H7AokLhWmc4m0Rex4HpJK2qB3nU9QVwydDTlj5HY8kz408aR9RE%2FNkGxAfQ3w%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-68e3\"\r\nexpires: Thu, 24 Sep 2026 18:42:32 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 264\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0ef8cfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26851,"size_decoded":6615,"mime_type":"text/css","magic":"ASCII text, with very long lines (26816)","md5":"0c0c5f463c564c294c3b863f80317844","sha1":"390aac445ec7d5e54d8dd59ec1e3b42fe5b978d6","sha256":"a0629634034086014426d63874d5c0097040881e9910b3e1120455173447a812","sha512":"f0cea933cb47ecbbeca8f48b5b164e283e6c3dbc9231849fe9fb300bc623c0ceebfad1b24ae28de01f9d18a0b803c0dfa05b690e8ad8c22631cb8085d5feb8d5","ssdeep":"384:9ZQ5Xnql7rVIta3vgisb/T3ZW0l3Xuyw9KQdjFf6vNFSppn:TQ5aBWg3vgiWFdRMRcmp","tlshash":"96c2b5fdfa941429b63fca1ffbc1f389b10aa25291230ad7e9636264c1cd097c763645","first_seen":"2024-11-14T08:23:41.263663Z","last_seen":"2026-09-19T22:22:16.755157Z","times_seen":4562,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/jquery.timepicker.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.432Z","timestamp":1789411617432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/jquery.timepicker.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aWa7wf4aE797tD6%2FJ0O4Nq5xvZar54iSmJfAXiQqIKO69fKrRrTeVirZHI722XdYbPfSpcWF0qQhfmD6WXa4%2BIWrHqO7I8kKo8Iuy1CcnXUkVDhoiqG7knKXG8niCBWRvMhIA04%3D\"}]}\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 24 Sep 2026 18:42:34 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68c93102-53d\"\r\nage: 262\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b18eb0ff95fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1341,"size_decoded":1208,"mime_type":"text/css","magic":"ASCII text, with very long lines (1340)","md5":"758bca2fa92c6f97b63b4d1a0a1d1d99","sha1":"b6355be6cdd1e1a6933c58daa7e5d3b16f661631","sha256":"d6f9163cd31cd2e86a6390ec939e1fb2e5d7b2ea5c5af946325a87279785916a","sha512":"b5aaf05e29a1b651353f32f42484cddd5b9b1a97e073b98b610088c90717418fa383a29840e3fa26a5ca05ec5a06c318a5a4c3f373cd77c08b49085c250c04d2","ssdeep":"","tlshash":"8c2134a1b07f2e9b78bf81ab10307fffe33bc471946036355ce99614434e09016c6216","first_seen":"2023-04-16T05:06:24Z","last_seen":"2026-09-20T17:09:54.59665Z","times_seen":1026,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_3.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.582Z","timestamp":1789411617582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/index_3.html HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DRUMnoUvX47WBKhtMdgoUiJMKZ1hVyI2f7lpUeALsPlnr8hKYnSzdEWUDAMvfr1PeXZ5yptv67MlncX8WbybZdh3CnfC72Ji81X%2Bgz7YT6PkZ0QRv8s2PhwShBS9LuVYasjDvCw%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3b18eb1efe5fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6031,"size_decoded":3033,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (5171)","md5":"98ae89ec9363acb0fe865dea29e0b6b3","sha1":"f9fec56adf5c5e4e04c08f2d1d342da45367330b","sha256":"710cc6023887a876b22f4cd01a4d7670d9faca877d8cd097de5d320965a9483a","sha512":"1c139f88929a3f9bf0b5cdb954a6166fef1166ecc60c78c2ce0b85be92070e4f94ee23b463e4cb8ed520d9407c2c80ae2b514eca318ad7f3277724d592dcbcb8","ssdeep":"96:6mkoy/LCitbEk+31toT6fx7gAM+kAozoCmGroxwVyFM1:Xkoy/LDEk+3URMkAozoCmUoxwVyK1","tlshash":"6fc1313aab10077b988fb9f98f95b4c03923ca37a6055560385cd206a7ecd7087bfd44","first_seen":"2026-07-21T03:18:42.990083Z","last_seen":"2026-09-19T22:22:16.789608Z","times_seen":5,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/freepik__adjust__64378.png","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.606Z","timestamp":1789411617606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/freepik__adjust__64378.png HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=4,i\r\netag: \"68c93102-d0167\"\r\nexpires: Thu, 24 Sep 2026 18:43:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 219\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sgEvbYEYnFeD6O5N%2FovvO%2B%2Bbw3Quwlo2g4OfGju9DHGL47GVC55w9UJji0Gks89OnqVbQbewri2XwoFRHiy1IMEStJVflUv%2FPBOm%2FAR%2Ff41nMJXk0nhrMS5DtzXawazh%2Bdo4NnA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb21ffefea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 852327\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":852327,"size_decoded":853112,"mime_type":"image/png","magic":"PNG image data, 2000 x 1333, 8-bit/color RGBA, non-interlaced","md5":"0f3370701f66489d35b628f7327665db","sha1":"00a1e3c2689cf2a518351759924aceb9f06da2ec","sha256":"1cd2c04c2910636a51270519fa17b520ccb490243858df867a9573df4140e4b1","sha512":"3fb557cc591adfcdab035a1c79a280e51a748d9fc9ab0e8217926a00d2b3a7cf9dec1eb7f90b48a1cdcf601ff9b09dfc34bdf03261534ffd776cb599c1baa373","ssdeep":"24576:DJ63edFg0bOHW8mxwSwXKv2Esp99lQjWQ0ueFf:DJ63edi0baW1xwPospnuj9lWf","tlshash":"af051290c866c9ad4ac6993d9362aa7bd3eff15ff2e18488e2312049dd01e40dd5ce7d","first_seen":"2025-10-29T06:03:01.345597Z","last_seen":"2026-09-19T22:22:16.804012Z","times_seen":5,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/fa-solid-900.woff2","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.674Z","timestamp":1789411617674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/fa-solid-900.woff2 HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2Fi%2FBR5nw91a3N4LGTTqNzx4Fb6%2B5N9TB22MTi9UKB8nhYvvcLpXq3gm68eufunKUp53K8WKr0w%2Fi0vShnZXO6XNHcplQspopOU3sYMYajysPZeV3A26yXtsPnECeD7nHve9tzc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb28824fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7954,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"870e5ef0f3c756c2ac4de8efcb01c9e3","sha1":"7db5c3e50d0a3584792a8fd7d68ebddf7ae93994","sha256":"b80cb4468c81b7c135cdd80e0c930d38eac9071c874ae3a94a0efd97760a661f","sha512":"50a3569f7065376d9256f7f6c1a3eb233d8da5765fd65513df374daf4fec951841b10e5246766619d6d29f214fe376114c7ff8c1dac071fc59bce5c22be77358","ssdeep":"192:Vj9jhjOtK/OaaUl8PzszZ081B89c7vlCeNA:1//FHtAc7vlCeG","tlshash":"5fe1a866f9f915be1097827231ba7b193de48013dea608a576edc1720f8df80ee07144","first_seen":"2026-09-14T18:47:41.394934Z","last_seen":"2026-09-14T18:47:41.394934Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logo2025_newsection_axpo_-1-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.789Z","timestamp":1789411617789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logo2025_newsection_axpo_-1-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gXNfit3Kr%2BHgY%2Bt2%2FaX0K9c9vifkDNUkLVdCSiV%2BTdTQ8qvQrmkCiO0b2qj%2Fqto0g9JSN6ka7yLowdZQ%2FgMeA91s2XhEdq5NokKPqCAbhGfHAhZ5Xup6mDWy07zsfyEaVKbfIPo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb35865fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7955,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ab62eeba4af135a9c15e0b4f9cb17c4e","sha1":"ab8c7f80e66ca38827edb0708deab15cd122b042","sha256":"b5bae611f6dc23495b819c5de3bec1ccfd9eb8ccb63d4e8fbfbbeef4103149fa","sha512":"7bc3ea9d7bb5a7347cb2d1ee9cd65e8205834018c3255f662c8a3251c066de32c2f1b93010a3c871b27f71127f22f3ac9f1e622269936a21b941d2e18fc0680f","ssdeep":"192:Vj9jhjOtK/OaaUl8PzLzZ081B8977vlCeNA:1//FetA77vlCeG","tlshash":"43e1b866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df84ee07284","first_seen":"2026-09-14T18:47:41.396083Z","last_seen":"2026-09-14T18:47:41.396083Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/choices.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.395Z","timestamp":1789411617395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/choices.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQjUWAI7FTN3JZlYvpoZWLhOxiaQmPq4q4hje%2BySuSlMsQ7KH4IZ8vh4omdy3hv0dMMKt07OcIZm17Rh%2BrihwpxRhtTbLdgXpE4W1y3k3O5m7ISO3vZ7MrRAGO%2BHa5fNizkLAxw%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-6c2d\"\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 267\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0cf71fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27693,"size_decoded":3459,"mime_type":"text/css","magic":"ASCII text, with very long lines (27692)","md5":"60303828f6a7424cea81726627c74d41","sha1":"4135221b81a63eb0ca1dc8ce10fea6eb7ecd89f5","sha256":"a216ba8962a54f568f0347572ab32573a68a256a9707cd6232d8dbd51f5e1c96","sha512":"d2505ccac09c3709a59736adc153498ec8e122dd4b85d0c0ae2326d5ed3fddcf4537f2f82df8becb697933a85e533bb9b5872fff696c19d94fd32dfec15b00dd","ssdeep":"192:7Q0IQ68jQ9MjDHX2TWQbQm6QE8jytMZPBz2TWGf:U0n6tCPHI0mpEtaRBCf","tlshash":"21c2cc7ce7217ea8e93f955ff4ee56db5f24c09295084d7eda03e830eec08642112ba5","first_seen":"2026-07-21T03:18:43.153628Z","last_seen":"2026-09-19T22:22:16.93178Z","times_seen":5,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/modules.woff","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.660Z","timestamp":1789411617660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/modules.woff HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1lZZWMiV7U5w8Hw3Ji6m2%2BKqrZhw1ST0uWxjUQ2I0yrl1me6cEisrutbTcvlhsEgzYlmdpt2LJt468RfGszv%2FXJEgu%2F2cOiEA2jyTSPFqkFVspickN25M7sI33uOVR1ilTnQjc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb2681efea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7952,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"5d9736d91e523ecc6dfcdcb3552b2b27","sha1":"bcee2e68e1f82b5a0a7d67a5a6d6b1f82fdaea7f","sha256":"2c6d3c7d44103b2b344e504dd049acf564246bdf5d3c226b1d381f4a190bcc47","sha512":"5e5d7e0ec17e8cbe73f0d4c47b29730985c74ee249f3a38e317c6545e97667f6f5f807dde22e9160f64d43dece5a6d10c2e95f8db2191f9a9fb5b04fc59d0b00","ssdeep":"192:Vj9jhjOtK/OaaUl8Pzk3zZ081B89e7vlCeNA:1//FltAe7vlCeG","tlshash":"38e1a966f9f915be1097827231ba7b193de48013dea704a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.397828Z","last_seen":"2026-09-14T18:47:41.397828Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w3aXo.woff2","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.663Z","timestamp":1789411617663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w3aXo.woff2 HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=njZrgNdibm2SeHJCq7LFV92NiWuJL%2BO%2FH2X0EIQ8l4Mo161M15pZcCJzkUT6Ehp5OisRwnAdoNSBzSbLI%2FkI4tLT14rgP5ac84DL9NskHyGV127cnuog4HoXHAhONVAsGiOTtVU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb2781ffea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7952,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"859b5967633054e13bda5f35f20adb78","sha1":"6fcc8f7e9df6a6789a95c41be58fecbc7b53fa53","sha256":"c7451d601a6e09e8a99f81d73cdf5f7969984a85a819f498b78c0825d46e22b7","sha512":"5a44fd4dae3b1f7f40913f7d696ea05e1fd6652208517237ce2b57ce3e8613bfb9b30b0c7429e631487febd7e90141a351e70adedc924a4e720c11c5e7d10502","ssdeep":"192:Vj9jhjOtK/OaaUl8PzCzZ081B89S7vlCeNA:1//FxtAS7vlCeG","tlshash":"b4e1a966f9f915be1097827231ba7b193de48013dea704a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.398717Z","last_seen":"2026-09-14T18:47:41.398717Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/cv.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.376Z","timestamp":1789411617376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/cv.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dF3GINw29PVJaYZ0aSog2x5znY4P4VRH3map7prWUCGmyVAmxBajYD0hnqeJiID2JfE7txvpCa5qgV5Wos4VdvAiJpEKnpL1MKE9Oa3%2FQsv4z9puybPQIdPAhFBn7okiIVHKvk%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-1538d\"\r\nexpires: Thu, 24 Sep 2026 18:42:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 268\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0af57fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86925,"size_decoded":14019,"mime_type":"text/css","magic":"ASCII text, with very long lines (65367), with CRLF line terminators","md5":"32c4d9551dfe412646284c941f8ec2b9","sha1":"f6f8fe9dcfad284b4d5cec14abb1439403b36193","sha256":"96d79ee425c4ab93320564349615f8d3a96a9c62c75ac847a6f569a1eeca5cd3","sha512":"5ed475751c1f0fd72746f094a7a53254fdb0448eb588ff1cd88b58f8fc6d4303623f19dd877904894286e9fd00b06cefec682e8636b63ae1f3cdf583eb450df7","ssdeep":"768:4DTiFi5Kw1dwhMAKl3+K6VWEgAXuHc49UQ:Fi5iMp+K6w7AnQ","tlshash":"ac839190a0323081263ec33db1496d8e1b7df17a97d34d9eb0dada1c87add750b53a16","first_seen":"2026-07-21T03:18:43.071906Z","last_seen":"2026-09-19T22:22:16.767684Z","times_seen":5,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/adsct-1.gif","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.490Z","timestamp":1789411617490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/adsct-1.gif HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=5,i\r\netag: \"68c93102-2b\"\r\nexpires: Thu, 24 Sep 2026 18:43:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 220\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=guOhhGcTWAMYQcnOPk5wxj3PCXHGEp9kVZDYA4ekMAeJAiSzNXHqWgSVwxU3wrqplgFyN5FR%2FOrasNQbujEfSh7xmglBFHxO3LoxIoAGFX80IlIpKQJyamkxaQ1Qbzj68aDVQcI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb15fb3fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":809,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-09-19T22:22:16.760041Z","times_seen":1445,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_5.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.585Z","timestamp":1789411617585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/index_5.html HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhdHIVb0VyoNPkIWWHiL%2FBDKEKQxW2Z7ODtqjcQzMb50k9c2PwKl41NWBWLg7quS34b8xHOiLWzWlok%2Bc6fIxz0K2bz%2FEblUpKCm6GqAJQ1zAsupBzhcDogH98lcNsbEfsXIDBk%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3b18eb1ffeafea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6014,"size_decoded":3035,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (5154)","md5":"c4b4cd2bebbf80deeae5766368e65a40","sha1":"e3964b957a9951c29ef07697a4558f2c78780832","sha256":"fbb48bdbc2a732786a2a598818d743d9a073053f641e580db32c6e07855f0fbd","sha512":"3b0c3a835473218d9ddb11ebbbae2806f5e878057118d2c000af8cfae385d31d463c285045e2b28374e4e9647e436cd48d56a9c5829a81d6da1abb52cf2b33a5","ssdeep":"96:2amkoy/LCDEk+3HT6fx7gAM+kAozoCmGroxwVyFM1:8koy/LkEk+3HRMkAozoCmUoxwVyK1","tlshash":"ecc13f3aab10077b988fb9f88f95b0c02a23ca3666055660385cd106abecd7087bfd44","first_seen":"2026-07-21T03:18:43.135863Z","last_seen":"2026-09-19T22:22:16.741632Z","times_seen":5,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logos_web_700_cfmt-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.819Z","timestamp":1789411617819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logos_web_700_cfmt-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bjn3rDzInGrvosJ8eDG%2Bk609In%2BxNAuogMUDsueNgPQLusyHPE5jTxtD0fyec4oKJiw4MmFlGS6yyOcYsexSq9LuEltg3nYwdRhafM5Ke2rX0XKiFh9A%2FhM%2F5wmsO6Ap8ZEieaQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb3888efea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7951,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"bb0e8b23a5e759996a9c54e7a2cb8444","sha1":"6499d844c194baf4e25d60598940fe03e5fc46aa","sha256":"e2673fb324cd892963ed671d8345cdd0b65a54e9fbafdfea8ff7ab95ca585c43","sha512":"ece8f375e4674a914d43901b691f09d5ec0a1e71710d4337240242049ae7d4b845ae2b394251c75d35d01b37d3a214f4b11720ebb105af08620f8b900edad40a","ssdeep":"192:Vj9jhjOtK/OaaUl8PzezZ081B89q7vlCeNA:1//F5tAq7vlCeG","tlshash":"bbe1b866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df80ee07284","first_seen":"2026-09-14T18:47:41.400727Z","last_seen":"2026-09-14T18:47:41.400727Z","times_seen":1,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w3aX8.ttf","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.894Z","timestamp":1789411617894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w3aX8.ttf HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ema01UuT5G%2FwSx9srS9w%2FYY4YKVBS%2BXtDrzSiN1cBIKWl6asXXRYlpAcXvFS61gxoAGsZvmZP2jqzLy06lidEdviXX32vNKrrQRI8ovwaGYDMrZqryaEMrkpqivCvXUuFn6O2GE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb3f8bafea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7952,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"6f3d68bcb040297cd3e7dba908de5390","sha1":"239a91477c3aac336e0ca96f1e26ffbda9219188","sha256":"7047c811805eac5bedf040e65deb857b905ec7e7265545d8970c7e5c96f5e75f","sha512":"6ef0c344c5b4835bd6004faa62db8bce3a4431842874854cc77d83a5699027a476b025c1da3d371869f9ffaab23c8fc597613f185ed3c74d143db17384749036","ssdeep":"192:Vj9jhjOtK/OaaUl8PzWzZ081B89S7vlCeNA:1//FxtAS7vlCeG","tlshash":"eee1b866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df80ee07284","first_seen":"2026-09-14T18:47:41.401632Z","last_seen":"2026-09-14T18:47:41.401632Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w3aX8.ttf","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.891Z","timestamp":1789411617891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w3aX8.ttf HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lE7edhVSytiFN5vYLJslqTjChk80Z2jWW158AbI%2BzfBbBFacIZF0bwhvNH0KCOjGo3W1vlFBZgK6pVdcZtXll1eZmeb9jsbe%2B0Zr8eK0IiaFzhjECdke7JtVCAp1vy1tpCbx2VQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb3f8b9fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7950,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"08761e1ec1142fed848f9eb34ad18057","sha1":"faf9d84b5817da065711b351028879a9ae468621","sha256":"fd9038cf53009c9944f654f6abfd2d1103403e4df4eafd47272d4693ebfb00a7","sha512":"5821963b5087f131c6885b712b5e658337c1e5509befdd44aba38ef6504b1bf920c073c1e2ddae758faf8ee4b28cb30d194880f336bef048e95a86147f3dd03a","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz+zZ081B89a7vlCeNA:1//FptAa7vlCeG","tlshash":"14e1a766f9f925be1197827231ba7b193de48013de6608a576edc1720f8df81ee07284","first_seen":"2026-09-14T18:47:41.402518Z","last_seen":"2026-09-14T18:47:41.402518Z","times_seen":1,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/11596ab9-7a31-4ec6-a247-ff87ef88ea71.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_4.html#type=core\u0026event=load","date":"2026-09-14T18:46:58.100Z","timestamp":1789411618100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/11596ab9-7a31-4ec6-a247-ff87ef88ea71.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_4.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2B43t4e%2BS%2FsSndE0yWf9UjrsZ1hqCV3ca%2FRDkh%2FhRX9UgKy%2FsiY020kS%2BaujaR1HIIViH997mNjb%2FZ4SljbFSmQf7wqFloDa5r6wE%2BHxkukg%2BapIyR%2F70ewMJkN8U%2BR%2FWYmdykM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb5290bfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7971,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"5e8601b1ad91328a98886739fa74d09d","sha1":"66ac610168dd508956661a08ad1eac454e651da3","sha256":"f3031f724681a83b06ebd52604e75d840f7b1e013f8498bbd77d769e32761004","sha512":"ca5da011a6dc9f2a6b065239789f620456bbed6ff767890af33bd8a9d0b48b7041920b681a743f873962f61bb9619f6bbba7d3d7d0bb67919778391106897a57","ssdeep":"192:Vj9jhjOtK/OaaUl8PzwzC081B89w7vlCeNA:1//FwtAw7vlCeG","tlshash":"63e1a966f9f925be1097827231ba7b193de48013de6704a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.403386Z","last_seen":"2026-09-14T18:47:41.403386Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/cdn-cgi/styles/main.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_7.html","date":"2026-09-14T18:46:58.344Z","timestamp":1789411618344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /cdn-cgi/styles/main.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_7.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SUb2YthomgQIStCeTPXwDfJwIQPkyzVg4vEE3APx%2B%2FgkP5Uo99oJt96fV0Ez3BkhOS0eM4pXwth6WuJzR%2FDWaSN6bxzaUlulk3vDiaUfobXfPJ90euzbVLWjtlORPnic%2B3rjlCk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nserver: cloudflare\r\ncf-ray: a3b18eb6b988fea1-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8013,"size_decoded":2817,"mime_type":"text/css","magic":"ASCII text, with very long lines (8012)","md5":"ff26f59e28a5fe6ea4ab23586415696b","sha1":"4182675484d175e363cd34b43041b7b1af93d0cd","sha256":"d30b4ea6f68456672f5abb35e9dcf7d54226372b66e9d60a7ee26b7a52568e74","sha512":"92c58eef6d1f885806450acd2927c57ebea2e8762c98b0826192555674bd4478e42add192834285d5934c0a76db8eac5eee1a65dc34b6f69246fad6c91a5fba4","ssdeep":"96:1jMh3JNJinvaE5TQRGxfldudududEtCbnaimpSpIplDO6bU6b16bE6bb6bNdkd94:1jMFJiva655dimwqjlP0/mGTZxRbC","tlshash":"75f1851bbf49104e3023886ae2c5a78d912dd282ee535bfff7173561cbc52fa1552b24","first_seen":"2023-04-05T04:39:40Z","last_seen":"2026-09-20T22:48:28.432957Z","times_seen":103999,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"performance.radar.cloudflare.com/beacon.js","fqdn":"performance.radar.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_9.html","date":"2026-09-14T18:46:58.431Z","timestamp":1789411618431,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /beacon.js HTTP/1.1\r\nHost: performance.radar.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"valid.rpki.cloudflare.com/?r=12223893","fqdn":"valid.rpki.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.230.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_7.html","date":"2026-09-14T18:46:58.523Z","timestamp":1789411618523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpki.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 21:38:23 GMT","end":"Mon, 19 Oct 2026 22:38:18 GMT"},"fingerprint":{"sha1":"4E:0B:BF:86:43:E7:FC:FC:CD:D3:F0:D3:ED:DA:5A:4B:CE:76:82:8F","sha256":"E0:14:83:09:4A:77:6A:7E:99:B9:EC:95:1A:E0:C8:03:BF:E4:42:33:12:46:8A:68:D0:DE:B3:35:F6:10:2B:E2"}}},"request":{"raw":"GET /?r=12223893 HTTP/1.1\r\nHost: valid.rpki.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://kerostationery.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dTI10osv3pY5OxYAAeeVP1dVpou4OS1dkZlZ4k0qe9ATZuWTCu4aOZSu91vktcFF%2BWDqCAXiwGK55LoNiR3GB064CM4Fjcg9ZPbGKKptcBcllTir2Ch5VFb7li7MzXbZiBACOmUeJbJYG5w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a3b18eb7f9737127-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76,"size_decoded":636,"mime_type":"application/json","magic":"JSON text data","md5":"d98c115f7617c6b5cfc6441ef9674c5e","sha1":"06d8f3f69b633c89171c1f0407b7fc6553b6a415","sha256":"bb65f5571fa5dea0a8d2c614d66e1b0eb5b9b12a2bed2e0fbd001a55f928f700","sha512":"eed53e95894db4fba20b3656820f49e8f7b70ad00e6b633906a5a4dc0dc62f598e2f7f72cf0685cfe04b78d5791bac6d1fa1fdeaafd4bc9abb7aa782286df2bd","ssdeep":"","tlshash":"b8a024c1437c17c71513404c00500d7775f545101055704c0c1c3c4c11c54f3700570f","first_seen":"2025-04-02T02:20:49.301257Z","last_seen":"2026-09-20T08:03:59.582837Z","times_seen":820,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":13,"connect":1,"send":0,"wait":240,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/et-divi-dynamic-tb-1938-tb-1942-278183.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.392Z","timestamp":1789411617392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/et-divi-dynamic-tb-1938-tb-1942-278183.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QfLXbu8ddiTLrOcHKV3jIPHn%2Bm2lU6upQJVYnEW%2BhzOfaCSMCsk4%2BOEpLTESk6gKPhA2UjlWdGU%2BQ2iBx7kJkK6%2FdvhwTr2lHiufCdUNUeEmZ8vOiTX2q3tunr9G4gj8iR1ocag%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-b9f9\"\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 267\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0bf6dfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47609,"size_decoded":6923,"mime_type":"text/css","magic":"ASCII text, with very long lines (14024)","md5":"52810ebd15f2acdbb759a7afca1d261b","sha1":"06163c81b97da23fdfa8cce536b280333276abbe","sha256":"0a813ab93259a2ea0817fda99f2b532d0279e9cef474cc9397d6ad7ee62e72ce","sha512":"b91d58e5fa93df6b822507fee26a915f8a8283e79bde452d354ab2d5ce454832c3f96dff87e5838df4b84554fb66e51026c870f4ca4738aa95b37354435a85f8","ssdeep":"768:86epSRrdczESCGi4/B/OoY0capzlk4xLs:86epSRrdczESCGi4/B/4","tlshash":"1023104e5b7236b6f193d395be81d30e65fd8103a94616a4bcd6e0689bd22428233dfc","first_seen":"2026-07-21T03:18:43.120686Z","last_seen":"2026-09-19T22:22:16.781933Z","times_seen":5,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/intl-tel-input.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.397Z","timestamp":1789411617397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/intl-tel-input.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2UDV5cCfGQzoOBegYC%2FGlPN1DDTVY4hzmOu025KwTazwkTR4O8V4%2F0HacYRB6Hi54OtmL%2FaAvCjhPKLiw4N2wguxSq%2Bpu3aGrDgK5WS9bIgWNVV9IMDLoOgfOMU6flGhjeJ5R1I%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-30e3d\"\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 267\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0cf72fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200253,"size_decoded":17349,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8be862a2468bbb5323d072295c09fb51","sha1":"475d6eb40d3e9971c7a14ec8f2859afc5fb6be29","sha256":"5408312c3566f24a7de39952acd6faa306690beae4b817bcde6340e256d13d46","sha512":"6fe759bca3ea30738831a612d624a709948e8c4d8233e96ebcd01319b02ca093b26d7b0a885367a5c635114528df49289fe3de534c4734a8202f3675c2daf197","ssdeep":"384:uJg7xU9FTy2RPxLHOXJS289bj3qav0lAOOJkR/2RzBsyF/H5DHupjI1LOLgEd:Y1OXJS2MSiI+/5DHupjI5Kd","tlshash":"eb14167b42116ebbed2fc64d70ef9bd7af56ce8276ac8cb926478440aec012150d7394","first_seen":"2026-07-21T03:18:43.081419Z","last_seen":"2026-09-19T22:22:16.892498Z","times_seen":5,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/submit-spin.svg","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.450Z","timestamp":1789411617450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/submit-spin.svg HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tCik04s6Gu1q0paSTmiCxUspL4p1%2BLrBixhJevxBYI%2BrFz%2BZ1v%2FZSBBqtQ%2FlbLOJJnImPAzVtF%2Fh1emx%2F7uc2AvbQTbCVTwYeKyCkDoiIw%2FN9Tl9nsFYf1i2q12q%2FvWrVH0U5ME%3D\"}]}\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 24 Sep 2026 18:43:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68c93102-1fd\"\r\nage: 220\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b18eb11fa2fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":509,"size_decoded":1120,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8651ef6101d05b1c7b9340ea9e63b98d","sha1":"2efc98059ba9c28d93312c2e51f63feb76f8a3b6","sha256":"7ffd6ec4d1b1980400d8cc710d2edd0fb7833e2c83262f8401247043ca258149","sha512":"1b718c8b2f58defbf6b77798a4a4d600a10ce5860911613cb89c93e3da16b267c311cf70d48eebb93d1158e7533b20282bd2404f738f2dde5b3b10c7afc7eb95","ssdeep":"","tlshash":"4ff05025d4158d685e188579e79e3960013da2d2460e14bdfac41533e4085dfa8af75a","first_seen":"2023-05-05T07:59:50Z","last_seen":"2026-09-21T00:18:44.761027Z","times_seen":11134,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logo2025_newsection_mediolanum-1280x302.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.791Z","timestamp":1789411617791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logo2025_newsection_mediolanum-1280x302.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=asNcjffDqS2zO4hhzzv4%2BtugtefAXcxtZPCoB73Fwl6fkea8o4S3O988NZTX56h99FDzP88%2BFYYL73qzAJF5mz33VABzhXTE2MmRxsG3ifa6xrG9LQzat4h%2BMi7YGV6u%2BNeq1CY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb35871fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7951,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"9c1955a764dc662452d3c2cde11d9e26","sha1":"b0ccbe28608c661181da115738c1037f5ee56e44","sha256":"abbf274b8989c87becb0a197f102c661419d7c4c4ff144275933beead29da0f9","sha512":"41b6c9241ece7e090e6482cf31f114469e3afa6226f27ff56a24c9be98424104ec80bd1ba945006e026ea09138a0d674bd0d2184197897c2dcdc4e0b2d762aaf","ssdeep":"192:Vj9jhjOtK/OaaUl8PzkzZ081B8907vlCeNA:1//FPtA07vlCeG","tlshash":"17e1b866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df80ee07284","first_seen":"2026-09-14T18:47:41.406859Z","last_seen":"2026-09-14T18:47:41.406859Z","times_seen":1,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logo2025_newsection_vargroup_.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.797Z","timestamp":1789411617797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logo2025_newsection_vargroup_.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KK0mgTfyAGCWV2JI1SsVLozV4lFz6n9fiTNCKvNpMoCNVRrNyZhuLu05v2d5vm04aOtKiP9AvCxIZwGNO298RuMXw8WiOfb780mXrN2uBcUIiV1OH6ZxElh9sccTL23aYZaI4ko%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb3586bfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7943,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"776fdc101a2907a7676540801c7d29c8","sha1":"519584b50f2e25f76e0801ff34f320a89a0c99f8","sha256":"52a4a31b4e686d1131866ca1636c14763a9ede97dbc86777e8d9b4fbfd8eab49","sha512":"63df63d4f34a334b2f447e9309949c4f0ed4d3dfb7f404ec85c054c5779e4fd58021503ae23bcb3c115b81fc3b844cd1624514f61f20c21aa6216c2b468238dc","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz4zZ081B89U7vlCeNA:1//FPtAU7vlCeG","tlshash":"d2e1b866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df84ee07284","first_seen":"2026-09-14T18:47:41.40768Z","last_seen":"2026-09-14T18:47:41.40768Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/styles__ltr.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_8.html","date":"2026-09-14T18:46:58.009Z","timestamp":1789411618009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/styles__ltr.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_8.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sfrMiHQljoLg91RIf0ZBr%2Ftq4d6UwDwAkd4qrZ1hxWKd4%2B6%2BkoZ%2F5LoBdKZCtC5FOCVX%2FoTeyHvH%2BK%2BJ5e%2BYEoLUPm%2B6iKOYWDLrywy3kGdwSenu2T21%2FcZKYG%2B52zLwG%2FuVIp4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb4b8defea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7969,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7722cae33e74c99c22df077eec5f5a82","sha1":"2fc5ba0d069114fc58e47297c281224d432febd5","sha256":"b202ee47442ca21b9743b03f28ecd6078ab11df034e65d9680b54b95f209195e","sha512":"772b039301f5f4c9484dbf735c77f9492df3eb9694c3d9a56d2ae5fd2f0eaa7607076e459a753cbaca7685142bd2c1a4fd3dd0589d25c8546f0d292b0fad8e32","ssdeep":"192:Vj9jhjOtK/OaaUl8PzbzC081B89H7vlCeNA:1//FJtAH7vlCeG","tlshash":"f8e1a966f9f925be1097827231ba7b193de48013de6708a576edc1720f8df85ee07244","first_seen":"2026-09-14T18:47:41.408546Z","last_seen":"2026-09-14T18:47:41.408546Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/f4a6b2d5-d203-40aa-b8c3-6f7f992d6a49.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_2.html","date":"2026-09-14T18:46:58.013Z","timestamp":1789411618013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/f4a6b2d5-d203-40aa-b8c3-6f7f992d6a49.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_2.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WxaDQ3oqCOc5J9%2BI5HvQ%2BK3dNN3%2Bz8WVjck2VV8jvol9UKQnkC7xQwd47rj8PMPY%2BSOdnzT1yuY%2BvWeBvSXnx1MkdhE5fKYTunzNNPw6boCpTG1XZEdkv1asmVSbZ9Noda9bDq8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb4b8e1fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7955,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d98c5c44fdb6a61d3829d9282fff7488","sha1":"ab92375ca3f0043ab4ccdebf9e1b8fbdf9a75b88","sha256":"65f6f53ffd62b9e9a27f557ecd444225b04f704c06cef616d08e0a9b25fecc80","sha512":"081b040cc1124e2db7d3229314e5233ec6efb37c1358ca7d06aea6499b0d4d6275c2e8aeb31efbbadbfaf9db408fb7190550299cc8a974c44495bfb4a1c73d24","ssdeep":"192:Vj9jhjOtK/OaaUl8PzEzC081B89I7vlCeNA:1//FItAI7vlCeG","tlshash":"54e1b966f9f925be1197827231ba7b193de48013de6708a576edc1720f8df80ee07184","first_seen":"2026-09-14T18:47:41.409935Z","last_seen":"2026-09-14T18:47:41.409935Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/wobi_baseline_logotype_negative_info.svg","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.444Z","timestamp":1789411617444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/wobi_baseline_logotype_negative_info.svg HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4R%2BeGbaAexZ%2FiAATfmXX1kGKerUVphcfiB5zkB%2BD72pZt%2BRh8t2R9f5iVwtkOXuuKIUkj7rzQBYeL0UMUojS3hd9ku1LXuTJYgXcRtLkvFueXeOz%2F5yS%2Fu%2F9M2piwYkK5fQprFA%3D\"}]}\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 24 Sep 2026 18:42:30 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68c93102-3646\"\r\nage: 266\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b18eb11f9bfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13894,"size_decoded":5262,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34f4955f03555914a6359072324062d7","sha1":"96441a28b3cb2f78f603e1aa456474c7eb5196e9","sha256":"f2e1f6fcf72ccc33412dbd8e0f143dadd610b288fb46470a27446844c3e44505","sha512":"5977932e756fed7e5dba213beef40b4b5964600f3ef81cd98642da7aa7ba047e5b1734bbe361acfa652f04ecfb2fcebb05cb6d563e542d1e91d8193915cbe58b","ssdeep":"192:VuH8xLXD5jqLAocVC15DuM9+MfM9+F5jiEEoyMdhaGDNFlhKKkL9ocVC1T:LxLNdzOR9+MU9+ziEBhaGDNFlhKKaz+","tlshash":"8d5211235314d7b99882c058ee71a0d6724550d7e2ed74acfaff8649af0f8f1e224678","first_seen":"2024-04-25T22:46:28Z","last_seen":"2026-09-19T22:22:16.808255Z","times_seen":12,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/speakers_bolas_membership_230988x200_adam_grant-1.png","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.807Z","timestamp":1789411617807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/speakers_bolas_membership_230988x200_adam_grant-1.png HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=usfuYZJBnvTnBdkPwsKa5FTXj%2FW3Reno1WRZco3yXqjTdI62RDZiQl49TkPmrW2Eu6jPTUtKDjilpjG1R%2FqclyurPcQiruX6RFzknc7wIjoR2nSpdpK%2B7Bj0OvnswpHY%2BR1aKAA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb3687ffea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7951,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"0aebf15c3733d1ae8bd63b5b5210099e","sha1":"39d33b4d5831760a383dce0a2488409960ec32e6","sha256":"ffb831e36f0e89dd006c4b94c31522c82feab688e6df1ae7f35b6555009129d3","sha512":"f5ce6ca77ef1bf1094e3e39f31facd9e5eb9044620a5c353a76cc6089d83d09d205e606859632befdeeb1e47053d84f5c67597cc9c2e087c3348b310d217f2fb","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz+zZ081B89m7vlCeNA:1//FdtAm7vlCeG","tlshash":"e2e1b966f9f915be1097827231ba7b193de48013dea704a576edc1720f8df80ee07144","first_seen":"2026-09-14T18:47:41.411582Z","last_seen":"2026-09-14T18:47:41.411582Z","times_seen":1,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logos_web_700_vargroup-1-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.825Z","timestamp":1789411617825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logos_web_700_vargroup-1-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LdEVXWkyB6c1mRBFyT377c1bhovKs60BSkwXbsbk%2FaVgRozOCm2glxbciCAPdnQ%2F9gZWft6mIZnkgZSeso75hPXnMLBhpPmZGYJDvtXC47oUIHPzcWqHctwnksEm62VzA3%2BYTrQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb38892fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7949,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8a1e783937fd50feb152b2dca225e74d","sha1":"9a838f6e35817d17bfa007f1ffabe47b733ac2b5","sha256":"8b63c9adcb6d540ac15a9b50e9b6eff94811d35469e5245936d8fe3be815cb15","sha512":"7abbdee90ac06b15c839d8edcb1b23fe402e8804c4482c10d205af292e0aadc48461765924f417b095b47005ad2aa2179b74bd4bef5616c442cace0cddbe925b","ssdeep":"192:Vj9jhjOtK/OaaUl8PzqzZ081B89i7vlCeNA:1//FBtAi7vlCeG","tlshash":"b5e1b966f9f915be1097827231ba7b193de48013de6704a576edc1720f8ef84ee07144","first_seen":"2026-09-14T18:47:41.412759Z","last_seen":"2026-09-14T18:47:41.412759Z","times_seen":1,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/The_World_Business_Forum_Experience2.mp4","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.868Z","timestamp":1789411617868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/The_World_Business_Forum_Experience2.mp4 HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=72318976-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hzdm9H5sonIVdERM5mnwwG%2FAWMzHJpuEdRjhKrC1OfwJ1igbk75wgrBM2VrZTunX6ze7ALKhPBC1IvLQorDkbq7iGLKQtn7REIpCd%2F5fiLo%2FgkQn0RmntRPStrr4yH7uha6V7Y4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a3b18eb3d8a8fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7952,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"fa4ffc82a86f468cf5bd1686747c63fe","sha1":"5299809be4798537a02a2c0e0bffcaeff744fdbd","sha256":"08986747a91c6f8c6a8657f76ad56153452ccc3e1caf1f74dfa6102ff7fec466","sha512":"405b088170d72b9a551dfdd104cf14d07a0b5394c29ca32aa18930d1a19c32c7e6e02cb15f7eb9e2e026ac5f21b30b4b89f76e4eaad1ea0c86cfaf38e8472a65","ssdeep":"192:Vj9jhjOtK/OaaUl8PzczZ081B89k7vlCeNA:1//FftAk7vlCeG","tlshash":"b7e1a966f9f915be1097827231ba7b193de48013de6704a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.41388Z","last_seen":"2026-09-14T18:47:41.41388Z","times_seen":1,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCs16Hw3aXo.woff2","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.672Z","timestamp":1789411617672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCs16Hw3aXo.woff2 HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mfd%2B9QU6C8ThZDj%2F8L1qgYUpwwqpy%2FA5FW3fcSO49MD3leCZ%2B7E9ZL7lvBI%2BltyK4XmLPatKOmrALKNoR2UeASBZicImUNia3G2VarihhHOrZ3QQk04QSCK85jWaFPaa8XzXYrY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb28823fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7956,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"be80b92296f3db64f02317b1a11902e1","sha1":"c35fdfa4fe87e06a31a30ffe33af3f1f155cc0e5","sha256":"15499835b9c6b8c67887363b62e257713f24cd10a98e56823cae172e04f3f36c","sha512":"d07dee7dbf16bac4d92eacb5391cf41553dd14519a3233ea5fe98f879f7f0e404254ea16719995e10b60f826871ea57cb6bf9202087fd00377233fa55c28f53a","ssdeep":"192:Vj9jhjOtK/OaaUl8PzXzZ081B89z7vlCeNA:1//FmtAz7vlCeG","tlshash":"43e1b966f9f915be1097827231ba7b193de48013dea704a576edc1720f8df80ee07244","first_seen":"2026-09-14T18:47:41.414971Z","last_seen":"2026-09-14T18:47:41.414971Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/modules.ttf","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.870Z","timestamp":1789411617870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/modules.ttf HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8wDioBczFrRYwMxt9Or%2Bh9PX5nOwjtbBjyBowjcJ05rX9fgE6mVB%2Bwa7FZpTudlVR72%2Fbvib%2B1Qmx9SptjBovWdoNu%2FLfmtmXB3MzUf1xRoIsgNPBZav6l3zWkO8ArRivGAXMbs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb3d8a9fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7956,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8567e26e0b0bb705c8e18fab57c736de","sha1":"7d600479b65854bfbf8b231ad001280771ab0226","sha256":"e04764752d55f73781b122222e8b9d265143e9aa714d16a04a6f948c50b4cf41","sha512":"64c727b6c941608785b10afed809e5965a76e54c3df88329f07cd66bdd486696a174b7be432d085a8abdd8938c01b09d5ad6b30292227e7e6135d581820d648c","ssdeep":"192:Vj9jhjOtK/OaaUl8PzxzZ081B89F7vlCeNA:1//FUtAF7vlCeG","tlshash":"4ee1a866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df85ee07284","first_seen":"2026-09-14T18:47:41.415771Z","last_seen":"2026-09-14T18:47:41.415771Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"9y49n2-m.ns1pcdn.net/a/t128.jpg?r=23641627","fqdn":"9y49n2-m.ns1pcdn.net","domain":"ns1pcdn.net","tld":"net"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_10.html","date":"2026-09-14T18:46:58.536Z","timestamp":1789411618536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ns1pcdn.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Thu, 03 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:7F:8B:AA:4C:48:85:18:1A:4E:DD:22:E0:9A:55:30:F0:44:EA:8C","sha256":"84:C9:3B:80:EB:61:7D:94:48:3D:1B:E1:5C:E6:45:29:E8:1F:EC:EC:28:9E:4D:6A:9D:49:2F:CD:FC:59:98:03"}}},"request":{"raw":"GET /a/t128.jpg?r=23641627 HTTP/1.1\r\nHost: 9y49n2-m.ns1pcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 130098\r\nx-id-fe: sto5-hw-edge-gc10\r\nlast-modified: Mon, 28 Sep 1970 06:00:00 GMT\r\ntiming-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-id: sto5-hw-edge-gc10\r\ntraceparent: 00-38828dd01bdf3c163a608a83e0a53393-91fe00e33fb3df25-01\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":130098,"size_decoded":130663,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 4410x2481, components 3","md5":"f944721bd55cbb39c452593638459aa1","sha1":"085940738cf5737b614a586d0f2005ff0445d6e5","sha256":"e5f1dabe89a7a1d0ae94bd8e14a273cb5144a6541c34a54192411677c18c43a2","sha512":"33c8c2882fc81062027733dc7f1d52f2194957cf94b34c6d71e393ed90f37a378a5c7122cbfe4dc35f7e63c26f7c4440886e9b3884663aea2a8183087611b3af","ssdeep":"24:5bglATIKl7DCmTpHTyxpEo1HM9kvfkzyfkmoyfkoRfkIRfkwhNfkm7usyfk6sRfn:qlg116z1+ukYkwkAkgkw9kugkxkY","tlshash":"07d3356d2f958feaf0f12770e684bf4cb3d96e6251efc35e1bcc1906baa00d01048a85","first_seen":"2025-04-03T15:35:47.263102Z","last_seen":"2026-09-20T21:21:55.426319Z","times_seen":2307,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":31,"connect":8,"send":0,"wait":113,"receive":51,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/dashicons.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.378Z","timestamp":1789411617378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/dashicons.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ShfZVM3akeInvFmZWOFnmWotV1f3c%2BvNdQavG0vQSJJQgCDu3hD3oQNKd%2BIbRPtGok91tieiyi2bO%2FhyceGFcVYdRdcDW79Q6u3JbaGQ2C7NKst%2BM5QqwcY4DZ6NgknCSNkB5gA%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-406b\"\r\nexpires: Thu, 24 Sep 2026 18:42:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 268\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0af59fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16491,"size_decoded":3914,"mime_type":"text/css","magic":"ASCII text, with very long lines (16456)","md5":"6f1e47b18ea8be959382fcc2944937a8","sha1":"938d3f2eb4caab3d611d650e1e708c094ad3ab88","sha256":"ac28c8b1ca4664562f0860f4c01673ff3df415756fabb0a14fa0628e3cad57b8","sha512":"a890008513f033516435133ab785745369c12efce8c13ae34d955d217e1cd52f13a0f5d6b6ca4c92158af5b8dd2dc64b939e7c43eca3bccb7af2cbba9bbdef04","ssdeep":"192:+rkgYZg/fMVEpmENZe9R90KRP6dE/tP7+VL7WO0nJloRVq:4uZg8VymxRh6u/tD+G","tlshash":"a172efa4e64904d677b1c853bfa6b27a5286bd3cb8418ddaf40b410c1af363605ddfb8","first_seen":"2023-11-10T06:54:11Z","last_seen":"2026-09-20T21:44:59.695552Z","times_seen":171,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/fa-solid-900.ttf","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:58.082Z","timestamp":1789411618082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/fa-solid-900.ttf HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sa7qyvVM2z4GibHFaB5TbGDeoyOuTYDZ1EGYMQgk6b6pCU9h8QGJ7O8aKUGqO4j5v1zMEaey7bBZVN6YnpE5WZ6Uy%2Bh7AwvV3mpMLq0BmspLWUb7xOZqp7UprlTk6FZHzCuIayA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb50901fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7947,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"88cdb723b242f55a3de68159ba37833c","sha1":"d484e9f5a0524d64cbbae17ab9dc0b1952342864","sha256":"494e0dbd9b2942d844ab424e25bb5df0db551dd5aa73dc21fa6978974177d635","sha512":"6260a50ddc5764012180ad2ea3cd035c7a29dbbf3117b8ecfead1d391a8413c359eadb13bc77fa808025e90ed4ae14e0dec2da2208aec1871d50ebf6a1293782","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz5zC081B89Z7vlCeNA:1//FTtAZ7vlCeG","tlshash":"a9e1b966f9f925be1197827231ba7b193de48013de6704a576edc1720f8df80ee07184","first_seen":"2026-09-14T18:47:41.426377Z","last_seen":"2026-09-14T18:47:41.426377Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/cropped-cropped-wobi_favicon-192x192.png","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:58.383Z","timestamp":1789411618383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/cropped-cropped-wobi_favicon-192x192.png HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cy90%2B9rAHU4pMFn%2Ff9%2FQmxJtwnVsp%2F9PIkyFPucgUMAPmanePevOFxy2VZIeWpAKiarsTABR1H44WU1a4EAruIlhdCgO4T0Qa4%2BkLgCzJB5Rzk%2FIAWd5URX1Wmx964zpUl0XXqM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a3b18eb6f99afea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/ays-pb-public-min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.413Z","timestamp":1789411617413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/ays-pb-public-min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qw3Qb9QSMP73BsFbM7rTBG9PcWXf800dgiBAJxa8WCBw2Q0LoKbBLK97MlO8r%2FQNfkujHF7YmaX4hzT8l4T03WBWB9LCRFWd4sf%2BhbyWq2bBzAUJHTTEsEyW5wCtAPrqgsfxC8k%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-762a\"\r\nexpires: Thu, 24 Sep 2026 18:42:32 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 265\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0ef83fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30250,"size_decoded":6416,"mime_type":"text/css","magic":"ASCII text, with very long lines (30203)","md5":"f1c1c6fc2f976ffb1efe59c2c062d5b6","sha1":"25e0c21d9551a69687e4881b1e7eea9c3a3e2156","sha256":"b8701d7fddbb6a0548dfef58f7bf4c943e9bc4c2635c73166a1b15fb16992095","sha512":"c5f33cd59c45692e256a06a0957d7af3ae26741264dd9e645cbe49bdf3300ae58ca52f750ef0514dfdd51181ea8facd5b492d3cf8ff728f90da27fec761833e0","ssdeep":"192:JMCKWp197GdIykk1PIQBSDLrjapQynrOoK04FatgBNaOE68xSYSY7Yj2tsAVhHiI:hWPLGCOrLak8KY7Y9AVhHi3WOwh3vOC","tlshash":"ead2432254a96338967fe123bbc3bbad741cc801d777c65bd461aa39d3c61e7813628c","first_seen":"2026-07-21T03:18:43.016559Z","last_seen":"2026-09-19T22:22:16.895145Z","times_seen":5,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/repeater.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.429Z","timestamp":1789411617429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/repeater.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2imJUlu9AM7JgElNsazVlEIyouVaUXTGC4p671vTuugUYueXPo0wHmvsHhGYjLkVTR7bxFciVN5jomlUwCTOXUoV9uQaw5n%2FBWFbeK00PHUpOmOs%2Fs4Z4Mo16ZsnaNcL6ZrOSow%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-392a\"\r\nexpires: Thu, 24 Sep 2026 18:42:34 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 263\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0ff92fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14634,"size_decoded":2338,"mime_type":"text/css","magic":"ASCII text, with very long lines (14633)","md5":"af3bc7134f5b7d571208b7e839014b74","sha1":"e002675e3e66f6648c2628d41150422ccf7590db","sha256":"3f8556afaffe2fd6a082d574a625a0f89f52569e4cad45f761a58832f8f308a0","sha512":"d4ea23744ffaee9990e2399353816cc3a2957a2959482757748bd17de146a9382086a9c9a5383f60fe8b126a720c3a4e1460e84129843781da877c7dc5f22858","ssdeep":"96:7VncpXEYpXGMCcGCaQI/MOsKjJPlulf4vBzXLwK4aA9npb810eEwrPEvFEoh1ZUL:BncBEYBG1cGCaVMO5LwKy8CN/h7W","tlshash":"cc623e305a01afdae96f40c7d4dfa79b6711ca219d0d8f5aaf034d4b7e8a024912b737","first_seen":"2024-12-15T13:27:06.275711Z","last_seen":"2026-09-20T17:09:54.776856Z","times_seen":361,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w3aXw.woff","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.887Z","timestamp":1789411617887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w3aXw.woff HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DvkajMRqfD23yUga9wEYS8R5hFRIFT5xBVpAs8txJ1RTPa3YoYdNYr9SODykWYMHnmeChbzeUa4BERn4QOGcrxcsebc6%2BFFRfXrLKBqAhWxURir2LXzhxk7qcnPZFDvdir5t920%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb3f8bcfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7948,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8ea4a5e67ebce4b589050cc26c398411","sha1":"a9440a1f898ed04a1b9c529b34c822047e19d0de","sha256":"4004f6ab9dcb368f96301bd6e313a95acd2dae04785bb5ed6a278f6200444cc4","sha512":"23c08eaf771140fe68651089cb781992ef4e13dab3a4918c0aa8725d48e4203779c73ff3975e59bcff213987484694a826328192c7b124a72d51ed4d98c9a856","ssdeep":"192:Vj9jhjOtK/OaaUl8PzkzZ081B89I7vlCeNA:1//FbtAI7vlCeG","tlshash":"31e1b966f9f915be1097827231ba7b193de48013de6704a576edc1720f8df80ee07144","first_seen":"2026-09-14T18:47:41.429738Z","last_seen":"2026-09-14T18:47:41.429738Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/dc_pre=CLKFkL723I8DFQFP9ggdda8qHA;src=10366921;type=stand0;cat=wbf500;ord=1630611970658;npa=0;auiddc=_;gdid=dMWZhNz;uaa=.gif","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_12.html","date":"2026-09-14T18:46:58.050Z","timestamp":1789411618050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/dc_pre=CLKFkL723I8DFQFP9ggdda8qHA;src=10366921;type=stand0;cat=wbf500;ord=1630611970658;npa=0;auiddc=_;gdid=dMWZhNz;uaa=.gif HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_12.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cs2ljXj5oYUXKy86JGD9lqV%2FiOwTbGYd9VuafaOYd%2B6BQ9A%2FIn8F6qmCYon1c0mY7VSeFEw5FSFZhEE35QwfN%2B93lRDx2%2FmmcvOfRYh60vWQQyYtaN%2FkSTCUIio9EPDoQ8xMVNI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb4d8f0fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7954,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"87e676ca9213214a5cd3326282f9e09f","sha1":"159c03ea33068ff3e3e4b9690dac2fca73fa944e","sha256":"9d938c1b75090f9c377e583a3ce492225dea83c1ffdfaf8ea1d37d3b36229a57","sha512":"5c920a68da63079c5110efc680e4e9cb395f2c78b619a185503bfaeab89438795221aefc9eb3d52af445fc356125ac4e5aef8e08a738100f390dc467bdfbf651","ssdeep":"192:Vj9jhjOtK/OaaUl8PzmzC081B89+7vlCeNA:1//FGtA+7vlCeG","tlshash":"87e1a966f9f925be1097827231ba7b193de48013ee6708a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.430973Z","last_seen":"2026-09-14T18:47:41.430973Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/41d27ba5-8f11-4ddc-b798-5d2d53f83673.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_5.html","date":"2026-09-14T18:46:58.122Z","timestamp":1789411618122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/41d27ba5-8f11-4ddc-b798-5d2d53f83673.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_5.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZaIgkhgDtjrLcduToC3HBxe7MduR0%2BZs%2FPpQwMRIlPZWg8YzLLH9lmUWlN1GN%2BaSwwjEqN62kLkWRE6s6%2BuBemtj2%2BGYjOirJvqsjG6iA6W6G5MTSRpB%2Bb%2FGCNKPpJtENSxfA4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb54916fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7959,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"41e10d51300d8c3316aa446ab326be7a","sha1":"76097c1c220ff2b3d13b76c1685936858384fdce","sha256":"b222f1608000aa237deb088e49e6329d81be45d0a5b6f7daa8e2d0a35de3863b","sha512":"c390958fc99725e565eabef34fa210cd75aefa34f9235146517510fa72e036c5ad53e10cca86a65c67de24036bb514ce1e8989f953f01e2cf0b71131e4b9c35e","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz5zC081B89V7vlCeNA:1//FftAV7vlCeG","tlshash":"6ce19866f9f925be1097827231ba7b193de48013de6604a576edc1720f8df85ee07184","first_seen":"2026-09-14T18:47:41.43211Z","last_seen":"2026-09-14T18:47:41.43211Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/6dbd3384-e864-44c3-afc6-e883ec36a620.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_6.html","date":"2026-09-14T18:46:58.398Z","timestamp":1789411618398,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /lander/glowing-sand-silent-car/6dbd3384-e864-44c3-afc6-e883ec36a620.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_6.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PfEE%2Bwk6lPRNBWtH736sCOs7Htao7Ww2GgBFf3wZXtH24HipAnL%2By6U7Dwg5jR07b00yKaKIWHW1uKjorlQsQDjGwDlCZcq0fX6MjQBQ3xgJFzk5rlCy3wJByLDHk3lPdlAhukk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb709aafea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/cdn-cgi/styles/main.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_10.html","date":"2026-09-14T18:46:58.422Z","timestamp":1789411618422,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cdn-cgi/styles/main.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_10.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_1.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.574Z","timestamp":1789411617574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/index_1.html HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=djw1ii6r%2FQ5bPqaCxoz%2B1COOq8oI8PEPw%2F63QhXa5HY0cqOJnr%2BbZ34uTas12ue%2FwNmQlSa3R6WVLg7St%2F8l3Od7VD40calWpI33Ck3v6PdoQIVesWfIfKi8Nz9UhfrMc7XR4UI%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3b18eb1efdefea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6131,"size_decoded":3097,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (5271)","md5":"8ba0449594648265a54711bf5cf1be3d","sha1":"cd99ff9191b20e24bfff8f4711c4be75a93d3a21","sha256":"fb26e35c7fb550e7d2a7bdfaa474921fc7b13e422360ae9ae90e057b3f6ae41e","sha512":"e0159afcacee949e48c1797e9f78bdcc51280b8d5b349b323a73b5b50a5e16bf900cd584999ad31bcb27c113a06a457229117bae2fdb051892987fdd73bdb25c","ssdeep":"96:6mkoy/LCVEk+3nT6fx7gAM+kAozoCmGroxwVyFM1:Xkoy/L2Ek+3nRMkAozoCmUoxwVyK1","tlshash":"09c1213aab10077b888fb9f98f95b4c42923ca37a6055560785cd205a7ecd7486bfd48","first_seen":"2026-07-21T03:18:43.143145Z","last_seen":"2026-09-19T22:22:16.749227Z","times_seen":5,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/mil-min-1.png","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.787Z","timestamp":1789411617787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/mil-min-1.png HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qefWv8ooRqeKBfWeLHlsksYzGvVLGCF%2BClF%2BOegjzcKmwJcJGO5p1kGGCoCVIsSq9ISQSr3UESXYklUqbD%2FCRf7YP45p96bClJcIBGCK2UNFt8kibyz8gBwVNJX3o4sAw0gfMcg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb35875fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7949,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"9e8dbcf0a7936557df0c8318db572ea4","sha1":"ba10bb7ef0b5d6e893d822bfd1ee0a89e90250d8","sha256":"7ea79622395663bffe4dc516174366f582201b8f667860c3c205a7894a9f81aa","sha512":"916bd87c32db67ec31af257c7e864b7a62500b55f808ef40103b32a2b7788853e24f95144ab5a65675fcaa5ecc6f36fdcbd705e4faaa2228f39a8126f6421fba","ssdeep":"192:Vj9jhjOtK/OaaUl8PzQzZ081B89Q7vlCeNA:1//FTtAQ7vlCeG","tlshash":"fae1b866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df80ee07284","first_seen":"2026-09-14T18:47:41.433761Z","last_seen":"2026-09-14T18:47:41.433761Z","times_seen":1,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/9c58d0e1-1013-4cfe-93b3-b31468b902ec.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_8.html","date":"2026-09-14T18:46:58.010Z","timestamp":1789411618010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/9c58d0e1-1013-4cfe-93b3-b31468b902ec.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_8.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PmySGhGUmdDudG8kPvkkSRVeDu0un0q2fSSy4YY6HPDMfpohFWmlPGRlw8RchmrxQvE4%2F3mkHf%2FnPT2TJQKqYg%2BoUsPtkzvQJf5IeQ9hCI3DPhL1i9hA2RhNkcYaeTuYe3GJwwM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb4b8e3fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7951,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3fdb72a58afeb1aa21afed4f1969a06f","sha1":"a79f8514371564349fb4199beca0b9acaaf4c706","sha256":"dca7b232195b17b2dcb2c723449d27490c2b6280900d1deea4c9e7777307d1da","sha512":"6b405e4946bdbb54715aa6a3665aa76a282eac7fc04070f7027bd27b1b4e5466e449e4269f9982355daa4c5e0768f136b423707561af788a4d15e679b701a379","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz2zC081B89S7vlCeNA:1//FqtAS7vlCeG","tlshash":"16e1b966f9f925be1097827231ba7b193de48013de6708a576edc1720f8df80ee07144","first_seen":"2026-09-14T18:47:41.43819Z","last_seen":"2026-09-14T18:47:41.43819Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/5e7a696b-886a-4acb-b84b-cbf00eff0e8b.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_11.html","date":"2026-09-14T18:46:58.017Z","timestamp":1789411618017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/5e7a696b-886a-4acb-b84b-cbf00eff0e8b.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_11.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nfeCcMCVrLlDtGqcJUe4ykVkW0wOYLAK1liQxNHAJ45fI2STPpE7AnKSGRTWAnzUK5knIOKYSMxYvJoMs5ahP1rEecYKu6ghG1thYjFaqlAVeGo4jyB905g3EjQ%2FpMgE9svuFJY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb4b8e5fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7947,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"6060a176d6c350ff829eb5831f88ec80","sha1":"56fac99ee7c3b8e20a8724232834ed01b3952a81","sha256":"0b92f900f93333382e302b1eefc87a5c323bffaf636e8e49c37c6fa4d05bfadf","sha512":"31d1643507e3c47ec1ef2dc6fa88c226059d4345b2b2369b851cfb5e533f5a09605e8fb578ad14e1965db4ee6692e3731021ae898b780ad46dbd288f39a51b78","ssdeep":"192:Vj9jhjOtK/OaaUl8PzwzC081B89M7vlCeNA:1//FMtAM7vlCeG","tlshash":"22e1b966f9f925be1097827231ba7b193de48013de6708a576edc1720f8df80ee07144","first_seen":"2026-09-14T18:47:41.439286Z","last_seen":"2026-09-14T18:47:41.439286Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq5Z9WXZ0pg.woff2","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.665Z","timestamp":1789411617665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq5Z9WXZ0pg.woff2 HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2BSyvVIdsgej42l7S3E4cupokekQNvx%2BFB15y5xZIkI4Hnx4hgqaK8Wlhyfv7ZpljTmU8%2FI00DeB6ucWmAaYzFnCXP7gtxd1EYYSLHPldMVHcMzpMyuoJEUWfcJyY09BDhKn0FQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb27820fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7952,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"1f817ee51a479ce3d453a0dcdf0b7f64","sha1":"da2d1531656f4b0ca811d6eb06490d3f4bae19cd","sha256":"356d25b9cf4019daf5f1562635dc8586d45058cbd9b0a5895f0d8e155d061caa","sha512":"c311bd870b9b1ad4f1876b80c7a902f99258e96c33c8d4e76fbb9aae75464288021cfa474cab0482a81be04ac980090ebd5ed04a46beb73b297660e231f3e20e","ssdeep":"192:Vj9jhjOtK/OaaUl8PzdzZ081B89h7vlCeNA:1//FotAh7vlCeG","tlshash":"fae1a966f9f915be1097827231ba7b193de48013dea704a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.440289Z","last_seen":"2026-09-14T18:47:41.440289Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/dc_pre=CM6ghcf23I8DFb9M9ggdwy0sew;src=10366921;type=stand0;cat=wbf100;ord=6847102901898;npa=0;auiddc=_;gdid=dMWZhNz;uaa=.gif","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_13.html","date":"2026-09-14T18:46:58.051Z","timestamp":1789411618051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/dc_pre=CM6ghcf23I8DFb9M9ggdwy0sew;src=10366921;type=stand0;cat=wbf100;ord=6847102901898;npa=0;auiddc=_;gdid=dMWZhNz;uaa=.gif HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_13.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkR115B5FMWScRdFoOkpje4yjgCnjsr3OXsM9P3WvzXRBCZeV2XqMs9AtXsrDV9HFfKdAd4WJCMpkfPeM9hH6eCZyoXHQwITjyoB34HqM0tt%2BJY86m1ChpD4bi%2BxVf2F8zqAnms%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb4d8f2fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7946,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"33fd923b5b37540be7b7da73d88f5522","sha1":"b0af2efc180a8a5e629aacdff7e5b5793c347b49","sha256":"e6732b34513376a89e310bf73652472b8b980795d31a340ce31a4d95859f8c06","sha512":"9cc0c990f0c0da3b560af953d2c3026de9f052da034372816fb5a2ebd3cdccb5a186ca668ba69cc6f640cebff540682faafcd3d8850c3186bfdbfb87b3d28f2a","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz0zC081B89E7vlCeNA:1//FktAE7vlCeG","tlshash":"07e1a966f9f925be1097827231ba7b193de48013de6708a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.44543Z","last_seen":"2026-09-14T18:47:41.44543Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/richtext.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.398Z","timestamp":1789411617398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/richtext.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w29J1o9%2BIFjkt3tiJy91PUedieqIB7P5T4NXf6hCZowfcwkfSTvqMKYG5kxmTSXlhVc3gAJY7PaIBG6ClX6anSSx0Ih85MVGxPtXu2pMGdrEGsbdqII7YvO04BEVcE5kRHuUiqs%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-11a7\"\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 267\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0cf73fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4519,"size_decoded":1404,"mime_type":"text/css","magic":"ASCII text, with very long lines (4518)","md5":"1b37f4a881af8af621f589a17770e74e","sha1":"12fdb2bd6946bebaa384f2e36668efc9edf99f52","sha256":"23a73cf46a80563841dcfeb7a741a46650518b95fd4e0c1488084848f74f3f13","sha512":"87446a2635220fd3539ad3d5e959a81c5d3308f31d2b1d8ec35b0340ff035fe5cd34ecd48833b1c158441c15234e20bddc0a4d8a1f72bf718be8d19cee208d7b","ssdeep":"96:mLL43GLAoR6hLQoP6hLbEhL5f1UCQLTnLH5Esy+L/sLNaW2LpstL95zoLyRu:mv43GsoR60oP6XcVf1UCQfnr5Esy+Lsq","tlshash":"e191ae78a2a97fb9fd0f448da4efa3c34f55cb819d9cdd69ca43ac45adc42108086770","first_seen":"2026-07-21T03:18:43.053918Z","last_seen":"2026-09-19T22:22:16.942454Z","times_seen":5,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logos_web_700_sda_bocconi-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.801Z","timestamp":1789411617801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logos_web_700_sda_bocconi-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tdbG3zZhTnq%2BkZRc0QAcypTR3%2BRaUHpGY9XN417ac7YWD0k8%2Brd63b69%2FTHtbGEc80sdE3ifbcQhHw6ssRd9sEKYfTuSDLax2kyD2je0q%2FdPekP45j36CWAecRYnWWEWQau96I0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb35868fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7953,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"0b70248de208a85e4bf368c32f566e2b","sha1":"ef63903d27221dd3869e972557a5d15fcb4e7d5e","sha256":"76b3197ad9ec70b25a7cec663ba42b3e32913d8c446d1ac365ff862d890139c7","sha512":"5828e85c3341a741f2543b649aa2c5c12f7d9e5e3077a09d527300f33413f996c5458d66b8a5d2cd18f0aa0f71afa3dc98ccbd83545d02626d57d1cb821e6a40","ssdeep":"192:Vj9jhjOtK/OaaUl8PzizZ081B89G7vlCeNA:1//FdtAG7vlCeG","tlshash":"8de1b866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df84ee07284","first_seen":"2026-09-14T18:47:41.448209Z","last_seen":"2026-09-14T18:47:41.448209Z","times_seen":1,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq5Z9WXZ0oA.woff","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.889Z","timestamp":1789411617889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/JTUFjIg1_i6t8kCHKm459Wx7xQYXK0vOoz6jq5Z9WXZ0oA.woff HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sWykh%2BWdAJoIS5LXVGuZCwv8i8lQQoq2Z6Mt4CqfhY%2F8A%2Fg8MB3CzkwhTKpPvybYi4CmEpPLAeOIMYb6PmPyifityAp9P8qHvBi4imIpBYlxfuDZXUX4FUy4ye2q7qFQmx2Y%2Ff8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb3f8bbfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7954,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"1894d2d91cfdf17bd9ae7ff4b7cc9785","sha1":"1c1d0e4d93dba4037836de83ccd33dab93936902","sha256":"316f9d617cd17a17ed3cecd42864768b9a1bf4908a1f5827a86b1da172177bb9","sha512":"e18db38d8ba1f50ae846dd727472da04e869d2bad1daed4d14f8fb6757cba214902c54375979e3ebc6f9d1d6641d11d2b975072acc77eff8680fe7bf76d27348","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz5zZ081B89p7vlCeNA:1//FAtAp7vlCeG","tlshash":"fae1a766f9f925be1097827231ba7b193de48013de6608a576edc1720f8df80ee07284","first_seen":"2026-09-14T18:47:41.449235Z","last_seen":"2026-09-14T18:47:41.449235Z","times_seen":1,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/11596ab9-7a31-4ec6-a247-ff87ef88ea71.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_4.html#type=core\u0026event=load","date":"2026-09-14T18:46:58.001Z","timestamp":1789411618001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/11596ab9-7a31-4ec6-a247-ff87ef88ea71.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_4.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2FezmLbwLbNzNWfSAFJcyHQZ4GdiCCaDkq9b5qxtzoJC%2B3sgZZLTQyv7KSFaQdGR13CdazUftOboc5zUFwbpVzwaVvXrhW3Lbb5x1AlsS2BhNXgfs%2BJXfjuJbY8j8XqlihpHE80%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb498d8fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7951,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7c707cbc03ddd78a7b4cc13dacb5ea49","sha1":"1050a8e891442ed3b69aff682fae759055380048","sha256":"bdbf132f696b3e52e214b9cfac4cad729e3f5c1419055bc0c3d69b750426a8a3","sha512":"ddfea12d57ccdd4af4535ba22c35ebee0aebecab4ab74af2bd70e0c70ed4f3d3d487e06292d54341e1720b1f9a65cc484dfccf04ef9a0881122996193422b64d","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz3zC081B89z7vlCeNA:1//FltAz7vlCeG","tlshash":"a4e1a966f9f925be1097827231ba7b193de48013de6708a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.450222Z","last_seen":"2026-09-14T18:47:41.450222Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/dc_pre=CJ7NzLj23I8DFYZC9ggdw1oKjw;src=10366921;type=stand0;cat=digit000;ord=4909367198642;npa=0;auiddc=_;gdid=dMWZhNz;ua.gif","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_11.html","date":"2026-09-14T18:46:58.048Z","timestamp":1789411618048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/dc_pre=CJ7NzLj23I8DFYZC9ggdw1oKjw;src=10366921;type=stand0;cat=digit000;ord=4909367198642;npa=0;auiddc=_;gdid=dMWZhNz;ua.gif HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_11.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nN5LdwyioYHIEeiAigOiYBq%2Fug5LRSR0DZSdpdzjQlyWXsUG39%2B5YyvLNzkn6O4rZb5v5Onia2Z8waFHB9bvITAfR3V7gmXSBFNt8s3jKZ65FmE5twp8JjYSJIzvjjyxdsnNueA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb4d8effea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7946,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"f352275adae977f48f34eb26a7dd5dd8","sha1":"71fac0eddcfd260ca281300bbe5379211fdca690","sha256":"55cc56597e31de72d6f137b7d3f3fea6289b220a1195acca3413fbc84f4ae72b","sha512":"a438dab7d54e878878b5e3b654d29d6462fb168dfddc808cb7d1d808f77dbc47243d2d2775bc1c907ab9ec6f1209ead3653026cdd652be9f1a3e76e393ad24c8","ssdeep":"192:Vj9jhjOtK/OaaUl8PzdzC081B89J7vlCeNA:1//FDtAJ7vlCeG","tlshash":"b4e1b966f9f925be1097827231ba7b193de48013ee6708a576edc1720f8df84ee07144","first_seen":"2026-09-14T18:47:41.451803Z","last_seen":"2026-09-14T18:47:41.451803Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/89d3f42e-b54b-4196-a61f-91d633b86608.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_3.html","date":"2026-09-14T18:46:58.144Z","timestamp":1789411618144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/89d3f42e-b54b-4196-a61f-91d633b86608.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_3.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRtLRoCyWa%2BpZI4LGSNQ4Bx2UXJkcZ3qMtwPZb32%2FkuGaNCKpJ%2BIcbf3JUNmOVsiaftUljt3dYpcCyxJTjrtDOFGGIsOxUOzfsr%2BUBBHiaOeXu7VoGle1xA8YDh0teIt3a5ZhXs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb5792dfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7953,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"78846c16a8281000bc1dbc36bf24a820","sha1":"9965636df62148eb0cf4eda2a08b0ccc305f9f28","sha256":"92e00e9dfeaec1e1386a3254f4717cac9abc9f680038d4cb59023a41eca5b939","sha512":"5aef5f929ebf2928951f8b4fab189fcf70e27af76502bb3bf1b0e754205ae1ab75f3729aef34114a5fd1959dfb28801bdbe718ccea7e0116bd8d99767adf531b","ssdeep":"192:Vj9jhjOtK/OaaUl8PzDzC081B89v7vlCeNA:1//FRtAv7vlCeG","tlshash":"89e1a866f9f925be1097827231ba7b193de48013de6604a576edc1720f8df80ee07244","first_seen":"2026-09-14T18:47:41.453244Z","last_seen":"2026-09-14T18:47:41.453244Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"performance.radar.cloudflare.com/beacon.js","fqdn":"performance.radar.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_10.html","date":"2026-09-14T18:46:58.423Z","timestamp":1789411618423,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /beacon.js HTTP/1.1\r\nHost: performance.radar.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T23:48:29.142551Z","times_seen":18575623,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/et-divi-dynamic-tb-1938-tb-1942-278183-late-1.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.391Z","timestamp":1789411617391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/et-divi-dynamic-tb-1938-tb-1942-278183-late-1.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RxgnfSCva5tfTOB01tPaFebcrfzwl%2Fo%2FjupxXyYarn0sX1ufgDpsBMVwwULwWe0QIZYqR%2BBML0MFPMBXwxyLEqYn%2FjzFc%2F1%2BTGl%2FyqSOidCz%2FoZ5hJWKC30wZrbf%2FbbfbJttexk%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-45bf\"\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 267\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0bf6afea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17855,"size_decoded":2484,"mime_type":"text/css","magic":"ASCII text, with very long lines (16772)","md5":"4012b8b15a8f630fa8c05407662b3d3a","sha1":"53dde35523a2ccf3b0f33270049f8a9389453609","sha256":"d0ba700428a8c65b25d0cfc9c89541ded995d2babade746917f223c3ff66b577","sha512":"33484abb8a75fd967ec4088e56304230622468d17ffda5059c1a3b9513fe4055235b93e01b0bf4e771cab7d7fa533bb0cda8ba35bbe9528839828f79ea6359b3","ssdeep":"192:LWlfOFOBx8Ivx8Ih74lMJoMOWJBliwEFTi0:LfImI1DoMOWJBliwEFTi0","tlshash":"af8217af8ad2325551234e66c7cd4e684b2dcba318611cde3651284fcb42fde72e621f","first_seen":"2023-04-07T09:28:44Z","last_seen":"2026-09-20T22:00:15.297516Z","times_seen":1505,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/wpforms-full.min-1.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.436Z","timestamp":1789411617436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/wpforms-full.min-1.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a88parAND0HUD5zLamueiT0LVc%2B0f8TuZ%2BobKQAcs%2FQNGELCiyFAn016Ho7aEhp10unm3%2BwTXDJ31dyw6%2FVlCI%2BwnoUGRxrK0MSw6XAcXknVXKs%2BrhxNWIQePLcFOXVh3uAs0sM%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-cb73\"\r\nexpires: Thu, 24 Sep 2026 18:42:34 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb10f97fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52083,"size_decoded":5998,"mime_type":"text/css","magic":"ASCII text, with very long lines (52083), with no line terminators","md5":"43a98b21ea1fa7d8003f9b8d6d0e7e19","sha1":"9590291cb696b307f8fc4d5cc0d7d8fa182e120e","sha256":"08e790774b180de3f4a98002f8ee5e12dbcf15644ab4a00414b1ec650ab3de7e","sha512":"87780851530f0657af685ca50d9bbbeb738cd29f3044adf69777f58e8db5ea3ddd07855b4da88a7db0724366698d5324fc8b4bbc89cdac187b2536207461cd68","ssdeep":"384:L7X901ltaXatLtLn8HeSbi6o290gMh8ONj7QlM9tpid5TzllBtc0Bj8GSRrf4u3j:/C1lYateHeSbi6t90gMh8ONPQlDTfc5","tlshash":"73337834aa006ffafd5f45caa0df97d70b10cf12de519e99bb839803aec12618417769","first_seen":"2026-07-21T03:18:43.046473Z","last_seen":"2026-09-19T22:22:16.79617Z","times_seen":5,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.439Z","timestamp":1789411617439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Wed, 16 Sep 2026 18:46:57 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2BE19uxl8X1gabZ45FtxFX2%2BtbS7R37GOjpp2eWT2qNAA3LiWO3lu6PpHQlYxuB4focDXlJIj2017vcVF2wzyTb39Lbcuy5AaVVEfN6hZmbLHobmutlxAamq7%2ByIQ1nLJhzZ%2Fp0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nserver: cloudflare\r\ncf-ray: a3b18eb10f99fea1-CPH\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-20T23:44:52.281208Z","times_seen":436908,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logo2025_newsection_hertz_test1-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.794Z","timestamp":1789411617794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logo2025_newsection_hertz_test1-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xqiRPEEvBYoe%2BRmSQp%2BZPIHDcrf2XWoeRKbnYporTBqc3UkSoY2QUx5tyIDFfLnIhFdEJLP3XJnq1vQ4NfrlrX0rJ5xAKhxHU%2BPfvwZ3P69McHwsdePb7pcutdCWO5S3VRY8XTU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb35867fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7949,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"b71b2d1dfac14e8497f3bebadf5abdb2","sha1":"19242f3a9447079f3f953f819024fabdce782a7b","sha256":"1cf862373e4e376f98fb5d1e820deaf781e8e9e8d6e52fe1fc39816e24fd2fda","sha512":"1ac5ce2bad358b343b99ee676ade8239221cf8cc316e5df702eda448c87747ec8c75b20967fadce998b80a453dcb1b0162f465b2fe3635e5824c6439b4419359","ssdeep":"192:Vj9jhjOtK/OaaUl8Pzt3zZ081B89B7vlCeNA:1//FItAB7vlCeG","tlshash":"d2e1b966f9f915be1097827231ba7b193de48013dea704a576edc1720f8df84ee07184","first_seen":"2026-09-14T18:47:41.4558Z","last_seen":"2026-09-14T18:47:41.4558Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw3aXw.woff","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.882Z","timestamp":1789411617882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw3aXw.woff HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7Zueg6N%2FVoLk%2B4fxVrI27h%2FHqumczcOYU7cnuBIf4wRRBtkvSDyjVSHu%2BXVvtrEtNbax%2B4wwfbjSzT5YNllIUZzTG2bg6XfCDmMWEcqFDihxCmQClMYEDlP7LZgofZJcxki7Uo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb3d8a7fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7956,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"eaad4834ee4e9cdb2070ee2770e52793","sha1":"1dd2cf208c327cad175a1fdd4d3e1c914ce4a962","sha256":"70f91f2579b72738889d53aa1162d17032056d5b64bd3fe1564faf1fc9c77d02","sha512":"9e08ec485e06b52095360dacc37858eb76289178b422bf7b74557487c81808454b1bce41b57b74d46639bc87888ba508f54072e3aab81c8af0169693c5680cdf","ssdeep":"192:Vj9jhjOtK/OaaUl8PzvzZ081B89j7vlCeNA:1//F2tAj7vlCeG","tlshash":"f0e1a966f9f915be1097827231ba7b193de48013dea704a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.457017Z","last_seen":"2026-09-14T18:47:41.457017Z","times_seen":1,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCs16Hw3aXw.woff","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.956Z","timestamp":1789411617956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCs16Hw3aXw.woff HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6XvuE4RRP0fY40lwHtz9JxC41kGQVU%2FOqMvhUtJLwAL3%2ByXH0wiwh5dr4upCks1Hr9FPMIDefzXy0%2FGnCWOIUJ5iL5BE%2Bth939Az7GvpYeXThL%2By%2BHpqNtYeJcZFZaVMC%2Fm9Hpg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb498d7fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7959,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"a1b00a2be9221e0c921ecae27c48030f","sha1":"763ba2a6e2c668cecd2ee1e611cc47bc0b852bef","sha256":"a38459352a12749ce3487728d728d5bd7e1b256ce3f55fd46425832f30cb5f6c","sha512":"79ac4d457c03f003a12c0601b583b27502fde0d0eb38491135bd8f14341f4021350d777912ebca212dd77cbd85d54bec9f1c1c4197bfcae4a9bfa5d6e2d3dccb","ssdeep":"192:Vj9jhjOtK/OaaUl8Pz0zC081B8907vlCeNA:1//FUtA07vlCeG","tlshash":"bce1a966f9f925be1097827231ba7b193de48013dea708a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.458087Z","last_seen":"2026-09-14T18:47:41.458087Z","times_seen":1,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/ivory-search.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.386Z","timestamp":1789411617386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/ivory-search.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jOMrwHExWMP5pSj536iqICANOGSxbBTiV2rHhfziGYGTuJ0NZOYBVgArDXh1wIsfAYDWTUeJ4vAm4ZYt60T6w1ZNj0ns6zK6iV9fOIBgmK0XjLAIilkc4SjfkboK1k2SQSkuF5w%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-19f1\"\r\nexpires: Thu, 24 Sep 2026 18:42:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 267\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0bf64fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6641,"size_decoded":2470,"mime_type":"text/css","magic":"ASCII text, with very long lines (6641), with no line terminators","md5":"45083ef30a6e71d04885f6b4276cb7a0","sha1":"d595776f7b14a138d04ad5452c07276bea22babb","sha256":"5e4d82463aa8389e0f15a7824efd4ff16c9c278bf79075a4b0b46fc156f59bec","sha512":"aec7b4dc71189e225142d3f928817720fc4271c95f452cb6fdc0fc330300912ce9c5f962591d420a3fb1f499052a75811a8f2951dc73da3b14bbf428af7223a6","ssdeep":"96:LjiuCl8cQqShczc2Ck90O/RUg7hs4kkwREwVPbNUc+ttsH0Z/Bn57Ucd:nxCl8cQqShczckZ/RUgds4kkSVssE","tlshash":"aad12f53d9c02d44b43b881462c97b693f7993127b120f6fb625ba70c78fcad0576b94","first_seen":"2024-09-04T17:46:10Z","last_seen":"2026-09-20T21:01:05.699904Z","times_seen":5816,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/layout.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.425Z","timestamp":1789411617425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/layout.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e5%2Fq7IilIWAiKdp0oAIZyj6wBuwpFWGowFNjlJgLTw1f5UB%2BA44M0ht0Re%2BYwQ%2BR5J88iZVqJmrkrHyNGOVeVwbiO9SUCGC4ONaoJxCFCvUTb44KUjizzCPskhK%2FG58cr2agLpY%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-a0a6\"\r\nexpires: Thu, 24 Sep 2026 18:42:34 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 263\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0ff8efea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41126,"size_decoded":3105,"mime_type":"text/css","magic":"ASCII text, with very long lines (41125)","md5":"7850d7d23ccff8cf11ac2a729329d51b","sha1":"69eda25718d14b7e1164e208789611069f9ac505","sha256":"2ba8a307e9bf5f7a04a093625fa5a33075a6fe5a67adb8fa443063858e9756e7","sha512":"8e67e0d244b17c7a872ff615590fda6eb136ace10c77fee5c60e0cda8d068373ba3497ad3d42fd0c62c30f1074abd490cda270fa5a24fb762468ea819bce96b9","ssdeep":"768:39GJXSzHr7Yn1DZnL1UBFJ5elXx7byIFADzSYEXV7C6:q","tlshash":"0203fd321e416fd4fd6f50cae1cfa7ab4711ce22dd189daaaf038c0b6f909259423765","first_seen":"2024-12-15T13:27:06.265967Z","last_seen":"2026-09-21T00:26:47.640088Z","times_seen":1363,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/flatpickr.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.434Z","timestamp":1789411617434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/flatpickr.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FjMJaWcgMtoJ3qYW9b8SW3gXoe93V9XnUeLEiIhO65EnyKOwiOh8ypth8dkezGPHI%2Fjo0nGwWGOXlpBAUk939iefL11HSvKPkxskm81XVZL7YabW0H%2BZSNwB0C9uZKCFreLonD4%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-3f04\"\r\nexpires: Thu, 24 Sep 2026 18:42:34 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 262\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb10f96fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16132,"size_decoded":3828,"mime_type":"text/css","magic":"ASCII text, with very long lines (11819)","md5":"0c34db577eaf0145cf1b845bc3a42a5e","sha1":"be13dae0f7f14c13ea88ff93460cba95f4f53930","sha256":"e975139b3a17828c0d3ea5eb40ef787163e25a7521ebac586746b25b35f54d21","sha512":"77c19a49d4ab337d601dff93715c1b55ca258b0ffa6f9c2bb7090b0dd65c449c9672135cc1ef8dc2c6e412392c24cdc86c9eb3bddf4cb3724aef3d9be3d88e33","ssdeep":"192:trB/w2d2wOgXF/TV6w51BY09jINEJkPFHRDjYIuN/GhOUkl8/d7YPi7:lBY2VjINEJgvLudGhOUkl+","tlshash":"4072323695321119a527eb3b1ef026893312c132a5c22adee6de77318bc770f25f92d5","first_seen":"2024-04-25T22:46:28Z","last_seen":"2026-09-20T17:09:54.625395Z","times_seen":843,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_4.html#type=core\u0026event=load","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.576Z","timestamp":1789411617576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/index_4.html HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvX2bojyKBUnQBmJ44KvaogZCMgf92tPZroksvqrT1%2BMAh%2Fe2ZEEH%2Bxul6I%2BZe%2FMbRso%2FtKf1EeDbgC0ZV02J0Zbdu5YjHzjOCPdzKkt1XAANRknjhSplGBvM8y9cfTaOea9Ruw%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3b18eb1efdffea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6144,"size_decoded":3104,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (5284)","md5":"a10c44852f5af2ba0a5db3a65ff75919","sha1":"8301333912613fce5bf37a51dee77ba586fe4d25","sha256":"0158246970a7ca24da7ae2be61e90f350f0852cabf5190c87f26899b0ab1a511","sha512":"10fb6185b6dd52bbdea5743a53cc6507ba35966c4df594956eac9e3d6d19c7c19d7991636cfb889cb8588422b0bfd2c4443d9a36d8c75eb52ee5e644253dd8e2","ssdeep":"96:kvrAmkoy/LCWJEk+3xOT6fx7gAM+kAozoCmGroxwVyFM1:k9koy/LhJEk+3xORMkAozoCmUoxwVyK1","tlshash":"a4c1413aab10077b988fb8f88fd5b0c03923ca3666055660785cd106a7ece7487bfd48","first_seen":"2026-07-21T03:18:43.083644Z","last_seen":"2026-09-19T22:22:16.834914Z","times_seen":5,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/wobi_membership_short_re-uploaded-1080p-1.mp4","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.601Z","timestamp":1789411617601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/wobi_membership_short_re-uploaded-1080p-1.mp4 HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=4,i=?0\r\netag: \"68c93102-f7c05a\"\r\nexpires: Thu, 24 Sep 2026 18:42:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 266\r\ncontent-range: bytes 0-16236633/16236634\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xwRIeJ4rJ3%2F%2F06a7MVYQ18kavGJwDtztWoj2r3a1ktxY0UL3Ov3jDUNL7wWmOdgXqiSnlMs6EAKORYOUmxrFWTihJHz3zfnWQg3%2Fx%2BenIXUYV4MXhR89yo8k2trcIFoZVpPVKlg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb20ff7fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16236634\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1612119,"size_decoded":1612924,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"894dfa654a5e913d5133a8f9c4eeed6a","sha1":"4682ef681c8411212d43c760ff87a7b451c180d3","sha256":"bc3e11f7bfa35621bec5e68d5f838d534c8d00145c6ba041822d6403365959c1","sha512":"a753d936e59b9eb1854e8e68502733ade5cc720f0ad0a8565578b5b20cf27ad0fe3112a952cc2de7a6129eb1188a7c20dcdcd79289c0bf2fe67524e10a3b92ac","ssdeep":"24576:WsQyh9BWXfTkuWUGfz2+5tiZ7LWuX05VusC1XW3y6g:WsXhKPTkuWUGi7LVkGlXW3Fg","tlshash":"4625235e0b88faaade3011bc74a5870f7630c86d77f301de9ad2d02638e0d5686a5379","first_seen":"2025-10-29T06:03:01.23362Z","last_seen":"2026-09-19T22:22:16.797297Z","times_seen":5,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":235,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/bannerlateral_logo_cfmt_640x400-1-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.793Z","timestamp":1789411617793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/bannerlateral_logo_cfmt_640x400-1-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SbplVJPhceXWCSc0bJK0Ndbr5SFfWb4zh%2FpSx9RF9t69xgs96wG%2B%2ByY6aVv7l8UZ6hAyduvFIt%2FyVNvW279df%2BtpHlGYIk7DQXEVSQfMdA3EDGANiOGRf4LYgGdT2Zjt6S15nqQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb35872fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7953,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"b548756cd339f8b3501665ea6a202035","sha1":"4bd4aba2de8cbf5f0614e4faec46645710551ef4","sha256":"a9c2ad851132f40af950c8951b048111e52d4f816db70e0aab053d010a319cc8","sha512":"e12b3d7e0a8808e485373320fcdc0c8278b0f7129c35342e57c5be3ce374a370d3413fbaf43118b9ece1e09f4551dc0a15fd500fb6d1ce5e5eefec582d7ffbd8","ssdeep":"192:Vj9jhjOtK/OaaUl8PzTzZ081B89P7vlCeNA:1//FqtAP7vlCeG","tlshash":"87e1a866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df85ee07284","first_seen":"2026-09-14T18:47:41.463743Z","last_seen":"2026-09-14T18:47:41.463743Z","times_seen":1,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T18:46:56.908Z","timestamp":1789411616908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BhzN%2BH09DZsS2aJTyuR%2FIgyb6BbUQHXCS7kIcAT9bGELyVn21oYXLlj6FZ9hzx3G5RGT%2Fggpu6GNeNWYKaEEL33lgP%2BcEO0xbAIBR%2BoUH57vaPiRoD%2BvQtNFIuLNJC2OiMLRnJs%3D\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 14 Sep 2026 18:46:57 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3b18eadfe79fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Yoast SEO:25.3.1","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Divi:4.23.1","description":"Divi is a WordPress Theme and standalone WordPress plugin from Elegant themes that allows users to build websites using the visual drag-and-drop Divi page builder.","website":"https://www.elegantthemes.com/gallery/divi","common_platform_enumeration":"","icon":"Divi.svg","categories":["Page builders","WordPress themes","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1712945,"size_decoded":101946,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (421)","md5":"ed01df10c49f509a4081bc527d763ccd","sha1":"b7b52da9538884d590ec8ce3d5e0569194bb87c4","sha256":"9608544a65f9820cf85d22a52331ef2faf497952157f1600c33b0b8cc281f824","sha512":"ea18852e7b7d67a7843760bba63d24aec3037eb19764dc1fc49f6260051fb3e6f7f11bebb782f4a8f0d1de0b144dc51b943d42e2d994a3bb40df7dc0f57a000e","ssdeep":"6144:ZNJmvJKee4jX0kD7Ri3CTr3Astghygppp8cH68ww6Vb:VmvJKeek4EcDUb","tlshash":"8825768e47f234f5101fc1e569bb47265ba89403f9d9ac043aeca3d44f9ada194b336c","first_seen":"2026-09-14T18:47:41.464678Z","last_seen":"2026-09-14T18:47:41.464678Z","times_seen":1,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":7,"connect":32,"send":0,"wait":241,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/layout-screen-big.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.427Z","timestamp":1789411617427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/layout-screen-big.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nhaKPpB%2FB5J84caPtwVvG2vgExXcdqeWqqse03t%2FhTWvEKnDoOHrrOMnUxk3iPs9i%2FjT%2F7sDgZ%2B0eva2b0XqttsFpbESORaiZ5gAog895rkUnnvK4YgN7orYeQRZu0pn9OImJgs%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-1075\"\r\nexpires: Thu, 24 Sep 2026 18:43:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 219\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0ff91fea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4213,"size_decoded":1119,"mime_type":"text/css","magic":"ASCII text, with very long lines (4212)","md5":"be5b9c244acc962a12f78611a32c87bf","sha1":"8dc15c8e764266d4030155310cdfbf951ba84fc0","sha256":"7fa587afb37f8db1a2f025754b3a6d45e6dadfba613215711c4cbfd33a546823","sha512":"f070140eca0b08ddf6a082b21a4ec6c0d98bb1672ce1d5a5211d025e7cde8a7f4afdd086625e23529ad924609166444a884d82954efa4e92740d8d4ca7071d07","ssdeep":"96:tAWATAwAI+VQzVAJ+WLqdGAJ+W0W0T0w0w:tAWATAwAdVQzVAJ+WLqdGAJ+W0W0T0wj","tlshash":"8b9165715b816fe4fd6fd49ad6cfbf7b1340cc02de084daa1a12949e3e5462640b3366","first_seen":"2024-12-15T13:27:06.260058Z","last_seen":"2026-09-21T00:26:47.608908Z","times_seen":1408,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/index_12.html","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.586Z","timestamp":1789411617586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/index_12.html HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gJG1wgehhyoVuqFz6saWDK7a%2FRq%2B3FGrCQJfTlgK%2BV7BoFKynfmi9DDE4juF4leA1Slm55GJF9g4U8p%2FqIBFmC1j1o42TngaqJTLdSGKj40mRXc%2F%2FYw40F7UWIuG4oWqwxUcy9c%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3b18eb1ffebfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7123,"size_decoded":3749,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (6263)","md5":"fe3214b08e250f7b02d06c842eea3276","sha1":"bbe63937376a6c5af4e692b7608b604b5ff9e6ab","sha256":"f95622d9eaddcfc3e57a79c4b55c58a7a3a36951d7e566f0cb0ba8bc9d8a9c26","sha512":"b71584b545bd41c304abd9d9dcb34d268b1963a43f82edbd15d53929c1442e07909844fa85ad068b4bdb59ec7c77663a3af6aa61766c611938c5456b1d05259b","ssdeep":"96:mQn3PaQhTmkoy/LCdUiEk+3TT6fx7gAM+kAozoCmGroxwVyFM1:mihCkoy/LAEk+3TRMkAozoCmUoxwVyK1","tlshash":"a2e17339ab10077b989fb9f88ed5b0c03d27c937a6055960396ce105abedd3446bfc88","first_seen":"2026-07-21T03:18:43.102018Z","last_seen":"2026-09-19T22:22:16.870585Z","times_seen":5,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/web_wobi_join_wobi_640x360_01-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.607Z","timestamp":1789411617607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/web_wobi_join_wobi_640x360_01-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\npriority: u=4,i\r\netag: \"68c93102-9fdc\"\r\nexpires: Thu, 24 Sep 2026 18:43:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BZMXoD5AhIF8WtpOc5zAJK5DtJwnwSkDQm7Rg6ZebNFrNv%2FdMYAJGnoeTI%2F4EmqfjNblnwyJ2C82xIOHDUFnNWxnIw7V1wd61NNXsF%2F%2BjHWaZfiJdh4KHFwCacHbGUtctTa10A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb21ffffea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40924,"size_decoded":41692,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"682e3a49b593a48ee27e5adab1be0772","sha1":"b72ec451f97f9fee310e28c6c9b779d7aa5686e8","sha256":"d3101df66c38d164099702456c2a5fb7349bd48982677dc929cc1f2d785dd9b7","sha512":"aa2b952de81127e66f163fc954a0e5a529712762f11df5dbe03407d67f0a5217130945d9bc6e5449a8eeaf14010f897260fc1dd10ed800dd379b0ab3db306828","ssdeep":"768:pGzMHrbW1IO+etWQHX/I9o6dSdlbT+UEzFS1k2B2l4cQQlYmVZ/2r:pJLKiQtWQHg9U2+cjn/2r","tlshash":"1e03f1ff67908d2ab2872cab413c495c25a0e31cb3537cda8867d17a248de672c58a75","first_seen":"2025-10-29T06:03:01.31393Z","last_seen":"2026-09-14T18:47:41.46725Z","times_seen":3,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/logos_web_700_iG-min.webp","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.802Z","timestamp":1789411617802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/logos_web_700_iG-min.webp HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=18K%2BuR4e7FeQIgBFV3d4ZgcxQk4DrlkcfPKazY0%2BT8J02wZrgXWGiNNr9aPynjskLz%2BnJPwct3JZbhq79%2F4PnRg%2FwgZY45U0V%2FXYloGkm7qHArQ1qDE0OwuXhtYzdF15yOpzbnk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3b18eb3586ffea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7955,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"a10c44b6bc37c384399d62eb0bdf4e56","sha1":"feadcddaeb9b364014e9d7ffbcc0a07899d45535","sha256":"440cf8efb4b794ca0d62ad1552078604413564c838636aa10aaa7925db57ef15","sha512":"f1589d5d96f62c972ed7e7d320fda41ed1a2bd6fad2711f051f8cce051bc35838a4e7e9311c6ac2fed8e6b18af1698d7654a883a9eba2db88be20d9cef923e8d","ssdeep":"192:Vj9jhjOtK/OaaUl8PzMzZ081B89w7vlCeNA:1//FTtAw7vlCeG","tlshash":"2be1a766f9f925be1097827231ba7b193de48013de6608a576edc1720f8df84ee07284","first_seen":"2026-09-14T18:47:41.468338Z","last_seen":"2026-09-14T18:47:41.468338Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw3aX8.ttf","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.885Z","timestamp":1789411617885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw3aX8.ttf HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PbvakmSoOa2rBc0jWRhtwG%2FBopIrS9Svy8ovPQQ%2Fd%2FyOPnPMQIhr2QB5xemZZL3j4LX0cic%2BC1d9gLN%2B0qZo5Mcd0b3LM85OABunAUwDlrUTCXVxQU7Ezz9uTB0saxC0Sf%2BSggo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3b18eb3d8aafea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7958,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"12b60cc4a5b79da0f5fa8310c9ef6488","sha1":"6d2422becd9ee817fa5382f65b0cc34944d79057","sha256":"71264bbe15bc096d0345d48d1ccd19e8e42d1a7452dd85d9f764897d3249fcc1","sha512":"ee459a2f1b65b033e5125b2593cf228147bf12f2fe80cafe5ecfe29eecc07937b756f4aaf912f0abf7e0daef2f0fb9f8ff4b9ba5c421f1e432ea8d1a99787729","ssdeep":"192:Vj9jhjOtK/OaaUl8PzJzZ081B89d7vlCeNA:1//FctAd7vlCeG","tlshash":"d4e1a866f9f925be1097827231ba7b193de48013de6708a576edc1720f8df85ee07284","first_seen":"2026-09-14T18:47:41.469137Z","last_seen":"2026-09-14T18:47:41.469137Z","times_seen":1,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/6dbd3384-e864-44c3-afc6-e883ec36a620.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/lander/glowing-sand-silent-car/index_6.html","date":"2026-09-14T18:46:58.012Z","timestamp":1789411618012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/6dbd3384-e864-44c3-afc6-e883ec36a620.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/lander/glowing-sand-silent-car/index_6.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Mon, 14 Sep 2026 18:46:58 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVrVmFA8BHv%2FcMCDkAJs6DoCxkKXuR%2FKnfb6a4cebwClWz%2FRPISAxjNm97JV6%2BqKA1wzir6kJKYmhESGTU1jZ4ExFWfmf%2FS4VW6Yk3XtgNqYXOuzj1Hm4pN6vKgUDRkXdIzi1z0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: a3b18eb4b8dffea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7193,"size_decoded":7955,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"dfc20253be9b14a0be99dc350b1003bf","sha1":"5c83fb928d9c1ec440c910751dcdccd80760544d","sha256":"a6ea88ba49366c69661c085c99b5822a0668163dcf962eff80b006de1cfc9e44","sha512":"179857802fb508f38e82ec7bc50f4854ba714a8433bff4bbbb246df7a91e9b4bde8d259c16349388c8da4583653fd2192d255ae58718107d2fc6f06b6061a9d2","ssdeep":"192:Vj9jhjOtK/OaaUl8PzszC081B89M7vlCeNA:1//FstAM7vlCeG","tlshash":"78e1a966f9f925be1097827231ba7b193de48013ee6708a576edc1720f8df85ee07144","first_seen":"2026-09-14T18:47:41.469907Z","last_seen":"2026-09-14T18:47:41.469907Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kerostationery.com/lander/glowing-sand-silent-car/swiper-bundle.min.css","fqdn":"kerostationery.com","domain":"kerostationery.com","tld":"com"},"ip":{"addr":"172.67.128.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kerostationery.com/","date":"2026-09-14T18:46:57.406Z","timestamp":1789411617406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kerostationery.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 10:01:55 GMT","end":"Thu, 26 Nov 2026 11:00:27 GMT"},"fingerprint":{"sha1":"5F:11:27:8E:4B:65:25:23:9F:C8:12:C1:8E:DE:47:04:8A:D6:E7:61","sha256":"10:93:7C:90:92:CE:E3:23:A1:DD:4B:A0:D5:85:82:1A:A7:AB:CC:DB:E9:54:A6:23:45:E3:5C:36:A3:81:B7:BA"}}},"request":{"raw":"GET /lander/glowing-sand-silent-car/swiper-bundle.min.css HTTP/1.1\r\nHost: kerostationery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kerostationery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 14 Sep 2026 18:46:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Sep 2025 09:42:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gylQLuRvQVZRSZ4CvHKinVQVi2U7GRYhG96G3FFB0lDE4yeYx2OVjtX07c29RZJdqcKYTQDvMl5N6YqiOdPINOyqHO73iqHQ7WLBp9ty7Tk4gNrHlmKg82D%2BA2f9OhVYF1Uf5sw%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68c93102-37bc\"\r\nexpires: Thu, 24 Sep 2026 18:42:30 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 267\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b18eb0df7dfea1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14268,"size_decoded":3584,"mime_type":"text/css","magic":"ASCII text, with very long lines (14012)","md5":"1ef5809297b75c50e5950d80143e1983","sha1":"c7b9218f7e169e4155c6ade5de6b85f9d678a3b4","sha256":"b94c6404ca78380d93c250fbbd7744c59d5706ddf3eebf3e25e1ba6b5bc2c73f","sha512":"7b0bc64431778f428320243227985e4d0ee51e44d8f8fd6339de18bfc346519cb69f058351cfa7e1464dca3e5eff2457f8382fd3b63270f45d361fc3f81b9452","ssdeep":"192:iTT4bHZ+SKqnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:iTMbHZ+knh2AVfHfA4XYz","tlshash":"5e52f2585340282753274f374bb1cbb9d6b444c14b93896e92c0ee48d7f6cba236f2e9","first_seen":"2024-08-19T13:47:21.882129Z","last_seen":"2026-09-19T22:22:16.783189Z","times_seen":29,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"kerostationery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}